Pinned Repositories
browser_vuln_check
browser_vuln_check ,利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等(browser_vuln_check framework using some known browser vulnerabilities PoC to quick automate aduit WebView or Browser security ,apply to application security before issue and detecting third-part WebView security)..
Fuzzing-ImageMagick
OpenSource My ImageMagick Fuzzer ..
Hacker_Document
收集一些以前看过对于入门和进阶很有用的攻击原理文档..
Machine-Learning-Note
机器学习笔记
network_backdoor_scanner
This is a backdoor about discover network device ,and it can hidden reverse connecting the hacker's server with encrypt commuication 后渗透后门程序,适合在已经攻陷的内网中做下一步的网络信息扫描..
PHP-WebShell-Bypass-WAF
分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV
PHP_Source_Audit_Tools
PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
Source-and-Fuzzing
一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
vuln_javascript
模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..
WebShell-Detect-By-Machine-Learning
使用机器学习识别WebShell
lcatro's Repositories
lcatro/Source-and-Fuzzing
一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
lcatro/Machine-Learning-Note
机器学习笔记
lcatro/Fuzzing-ImageMagick
OpenSource My ImageMagick Fuzzer ..
lcatro/PHP-WebShell-Bypass-WAF
分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV
lcatro/PHP_Source_Audit_Tools
PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
lcatro/WebShell-Detect-By-Machine-Learning
使用机器学习识别WebShell
lcatro/browser_vuln_check
browser_vuln_check ,利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等(browser_vuln_check framework using some known browser vulnerabilities PoC to quick automate aduit WebView or Browser security ,apply to application security before issue and detecting third-part WebView security)..
lcatro/CVE-2017-7269-Echo-PoC
CVE-2017-7269 回显PoC ,用于远程漏洞检测..
lcatro/Think-in-Security
从二进制到WEB ,分享我在安全路上的思考与点滴,后面会不断地更新..
lcatro/Angr-CTF-Learn-Note
The learn note of Angr-CTF ..
lcatro/qemu-fuzzer
Qemu Fuzzer.针对Qemu模拟设备的模糊测试工具,主要思路是Host生成种子Data,然后传递给Guest中转程序,由中转程序访问MMIO,以达到和模拟设备的交互,不同于qtest自带的fuzzer.
lcatro/etherum_rpc_steal
The Etherum RPC Steal Toolset and honeypot .以太坊"偷渡"漏洞利用和蜜罐工具集.
lcatro/klee-fl
KLEE-fl : Compile Project to Bitcode and Try Fuzzing with KLEE .
lcatro/my-blog
我的技术博客,记录成长
lcatro/Aurora_CAPTCHA
极光验证码,为反爬虫而生
lcatro/KiMi-VulnBot_Framework
KiMi 漏洞感知机器人扫描框架 @KiMi-VulnBot @KiMiThreatPerception
lcatro/My_PoC
Collect some PoC that I writted .记录自己写过的PoC ..
lcatro/cve_diff_checker
快速对自己项目中引入的第三方开源库进行1day patch检索,patch数据每天晚上11点更新
lcatro/FreeWebpilotInChatGPT35
非付费的chatgpt3.5 用户也可以使用付费的chatgpt4 Webpilot 插件. Free ChatGPT 3.5 users can also use the paid ChatGPT 4 Webpilot plugin.
lcatro/Ethereum_Similar_Contract_Classify
lcatro/BitLeague
聚合交易平台BitLeague
lcatro/Python_CookieLib_0day
Using This 0-day to Anti-Python-Spider ..
lcatro/pseudo-protocals-digger
system pseudo protocals digger for windows -- Windows 系统下的伪协议查看工具
lcatro/Big_Project
我就笑笑不说话,哈哈哈哈..
lcatro/ethereum_solidity_symbol_execute
Ethereum Solidity Symblo Execute Demo -- Check Vuln and Auto Build Payload ..
lcatro/ethereum_mev
Ethereum mainnet MEV-Bot
lcatro/python_compiler
Python 指令编译工具(Python Instruction Compiler )..
lcatro/ssh_control
SSH批量群控工具
lcatro/The-Meditations
The Meditations -- 沉思录
lcatro/vgpu-note
Rubbish at 2021/10