Pinned Repositories
2022-HW-POC
2022 护网行动 POC 整理
agartha
a burp extension for dynamic payload generation to detect injection flaws (LFI, RCE, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitations.
amass
In-depth Attack Surface Mapping and Asset Discovery
Apache-Dubbo-CVE-2023-23638-exp
Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
Awesome-hacking-tools
黑客工具收集仓库,包含主流和非主流漏洞利用工具,subdomain、备案查询工具、CVE仓库、Hacking Tools、Exploits、免杀工具、weblogic漏洞利用工具、Red Team、Cobalt Strike、C免杀、bypassAV、内网渗透工具、漏洞利用、工具插件、burpsuite插件;
basecrack
Decode All Bases - Base Scheme Decoder
BurpCrypto
BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件
CTF-Note
CTF笔记:该项目主要记录CTF知识、刷题记录、工具等。
CVE-2017-11882
CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.钓鱼
GUI_Tools
一个由各种图形化渗透工具组成的工具集
huahuatzt's Repositories
huahuatzt/GUI_Tools
一个由各种图形化渗透工具组成的工具集
huahuatzt/2022-HW-POC
2022 护网行动 POC 整理
huahuatzt/agartha
a burp extension for dynamic payload generation to detect injection flaws (LFI, RCE, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitations.
huahuatzt/amass
In-depth Attack Surface Mapping and Asset Discovery
huahuatzt/Apache-Dubbo-CVE-2023-23638-exp
Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
huahuatzt/Awesome-hacking-tools
黑客工具收集仓库,包含主流和非主流漏洞利用工具,subdomain、备案查询工具、CVE仓库、Hacking Tools、Exploits、免杀工具、weblogic漏洞利用工具、Red Team、Cobalt Strike、C免杀、bypassAV、内网渗透工具、漏洞利用、工具插件、burpsuite插件;
huahuatzt/basecrack
Decode All Bases - Base Scheme Decoder
huahuatzt/BurpCrypto
BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件
huahuatzt/CTF-Note
CTF笔记:该项目主要记录CTF知识、刷题记录、工具等。
huahuatzt/CVE-2021-40346
CVE-2021-40346 PoC (HAProxy HTTP Smuggling)
huahuatzt/CVE-2022-27925
huahuatzt/CVE-2023-38646
POC for CVE-2023-38646
huahuatzt/follina.py
POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes
huahuatzt/ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
huahuatzt/goby_poc
goby poc or exp,分享goby最新网络安全漏洞检测或利用代码
huahuatzt/GobyVuls
Vulnerabilities of Goby supported with exploitation.
huahuatzt/HackBrowserData
Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。
huahuatzt/hackerone-reports
Top disclosed reports from HackerOne
huahuatzt/Online_tools
该工具是一个集成了非常多渗透测试工具,类似软件商城的工具可以进行工具下载,工具的更新,工具编写了自动化的安装脚本,不用担心工具跑不起来。
huahuatzt/oss-browser
OSS Browser 提供类似windows资源管理器功能。用户可以很方便的浏览文件,上传下载文件,支持断点续传等。
huahuatzt/Packer-Fuzzer
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
huahuatzt/penetration-suite-toolkit
本项目制作的初衷是帮助渗透新手快速搭建工作环境,工欲善其事,必先利其器。
huahuatzt/POChouse
POC&EXP仓库、hvv弹药库、Nday、1day
huahuatzt/PotatoTool
这款工具是一款功能强大的网络安全综合工具,旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能,包括解密、分析、扫描、溯源等,为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.
huahuatzt/pwcrack-framework
Password Crack Framework
huahuatzt/Some-PoC-oR-ExP
各种漏洞poc、Exp的收集或编写
huahuatzt/SSH-Harvester
Harvest passwords automatically from OpenSSH server
huahuatzt/Sunflower_get_Password
一款针对向日葵的识别码和验证码提取工具
huahuatzt/v_jstools
模仿着写一个开源的 chrome 插件,用来快速调试前端 js 代码。
huahuatzt/vulntarget
vulntarget靶场系列