imagin-sch's Stars
massgravel/Microsoft-Activation-Scripts
Open-source Windows and Office activator featuring HWID, Ohook, KMS38, and Online KMS activation methods, along with advanced troubleshooting.
mitmproxy/mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
LC044/WeChatMsg
提取微信聊天记录,将其导出成HTML、Word、Excel文档永久保存,对聊天记录进行分析生成年度聊天报告,用聊天数据训练专属于个人的AI聊天助手
linexjlin/GPTs
leaked prompts of GPTs
WeNeedHome/SummaryOfLoanSuspension
全国各省市停贷通知汇总
chaitin/SafeLine
serve as a reverse proxy to protect your web services from attacks and exploits.
moonD4rk/HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
GreyDGL/PentestGPT
A GPT-empowered penetration testing tool
hfiref0x/UACME
Defeating Windows User Account Control
rebeyond/Behinder
“冰蝎”动态二进制加密网站管理客户端
pwntester/ysoserial.net
Deserialization payload generator for a variety of .NET formatters
wgpsec/ENScan_GO
一款基于各大企业信息API的工具,解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。
tr0uble-mAker/POC-bomber
利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点
crytic/building-secure-contracts
Guidelines and training material to write secure smart contracts
Y4tacker/JavaSec
a rep for documenting my study, may be from 0 to 0.1
davincifans101/pinduoduo_backdoor_detailed_report
Maybe the most detailed analysis of pdd backdoors
Norbyte/bg3se
Baldur's Gate 3 Script Extender
chvancooten/follina.py
POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes
fransr/postMessage-tracker
A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
safe6Sec/PentestDB
各种数据库的利用姿势
DataDog/KubeHound
Tool for building Kubernetes attack paths
wsummerhill/C2_RedTeam_CheatSheets
Useful C2 techniques and cheatsheets learned from engagements
xf555er/ShellcodeLoader
This is my FirstRepository
dhmosfunk/CVE-2023-25690-POC
CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.
xcanwin/CVE-2023-4357-Chrome-XXE
[漏洞复现] 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.
5alt/ultrarelay
poison and relay NTLM credentials
BugBountyzip/Bambdas
dushixiang/evil-mysql-server
evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.
waderwu/javaDeserializeLabs
javaDeserializeLabs
aldebran97/AC
AC自动机 文本相似检索 词库匹配 分词器