Pinned Repositories
BlogEngine.NET
Multi-User ASP.NET Blogging Application
burp-python-plugins
burp-sourcemap-finder-plugin
Chisel-Strike
A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
DcRat
A simple remote tool written in C#. 一个简单的c#远控
docker-javafx
Docker image with javafx
osep-tools
oswe-tools
tree-chtsec's Repositories
tree-chtsec/oswe-tools
tree-chtsec/osep-tools
tree-chtsec/burp-sourcemap-finder-plugin
tree-chtsec/burp-python-plugins
tree-chtsec/BlogEngine.NET
Multi-User ASP.NET Blogging Application
tree-chtsec/Chisel-Strike
A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
tree-chtsec/DcRat
A simple remote tool written in C#. 一个简单的c#远控
tree-chtsec/docker-javafx
Docker image with javafx
tree-chtsec/DotNetToJScript
A tool to create a JScript file which loads a .NET v2 assembly from memory.
tree-chtsec/fastjson-blacklist
tree-chtsec/firmware-analysis-toolkit
Toolkit to emulate firmware and analyse it for security vulnerabilities
tree-chtsec/GWTMap
tree-chtsec/Havoc
The Havoc Framework.
tree-chtsec/house
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
tree-chtsec/JavaApplet
These are from Offensive Security. This is for study Client-Side Attack with JavaApplet. A good example of a client side exploit based on a human vulnerability, as opposed to a software vulnerability, is the JavaApplet client side attack. This attack affects targets with Java installed and enabled in their browsers – a required feature for many administrators and power users. As JavaLenabled browsers can run Java applications, it is quite trivial to make our own malicious Java applet which will execute code of our choosing when run. However, there is one drawback: the user will get a warning box before execution of our Java payload. The average user may not understand the implications of clicking Run on this warning box. If the user runs the program, the Java software installed on the victim’s machine will execute our payload happily.!! The Java code below will download a given executable and execute it in a temporary directory on the target machine. But, you need to edit IP address in the program
tree-chtsec/MicroBackdoor
Small and convenient C2 tool for Windows targets
tree-chtsec/MiniDump
C# Lsass parser
tree-chtsec/mitre_attack_csv
MITRE ATT&CK in CSV form
tree-chtsec/python-fortify
Read and write Fortify Project (FPR) files in Python
tree-chtsec/rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi
tree-chtsec/SharpAgent
C# havoc implant
tree-chtsec/SharpShooter
Payload Generation Framework
tree-chtsec/sqlmap
Automatic SQL injection and database takeover tool
tree-chtsec/Vulnerable-OAuth-2.0-Applications
vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.