wivd

Pinned Repositories

0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
Language:C00
2022-HW-POC
2022 护网行动 POC 整理
Language:Go0 0 00
2023
HW2023@POC@EXP@CVE-2023-2023
1 0 00
3vilTiwnAttacker
This tool create an rogue Wi-Fi access point , purporting to provide wireless Internet services, but snooping on the traffic.
Language:Python00
aaaAyyYy
简单的分离免杀demo
Language:C++0 1 00
achewiki
在线工具均来自下列开源项目部分进行更改，并在该项目部署
Language:HTML0 0 00
APTnotes
Various public documents, whitepapers and articles about APT campaigns
00
gopoc
用cel-go重现了长亭xray的poc检测功能的轮子
Language:Go3 0 00
httpx
httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
Language:Go1 0 00
HVVault
梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。
7 0 00

wivd's Repositories

wivd/HVVault
梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。
7 0 00
wivd/2023
HW2023@POC@EXP@CVE-2023-2023
1 0 00
wivd/0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
Language:C00
wivd/2022-HW-POC
2022 护网行动 POC 整理
Language:Go0 0 00
wivd/achewiki
在线工具均来自下列开源项目部分进行更改，并在该项目部署
Language:HTML0 0 00
wivd/AttackWebFrameworkTools
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等
0 0 00
wivd/cobaltstrike4.4_cdf
cobaltstrike4.x版本破解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子认证
wivd/exec2shell
Extracts TEXT section of a PE, ELF, or Mach-O executable to shellcode
wivd/fapro
Fake Protocol Server
0 0
wivd/fastjson-rce
fastjson rce env based on springboot
Language:Java0 0
wivd/ferry
本系统是集工单统计、任务钩子、权限管理、灵活配置流程与模版等等于一身的开源工单系统，当然也可以称之为工作流引擎。致力于减少跨部门之间的沟通，自动任务的执行，提升工作效率与工作质量，减少不必要的工作量与人为出错率。
Language:Go0 0
wivd/go-icmpshell
一款基于 gopacket 编写的 ICMP 反弹 shell 工具
Language:Go0 0
wivd/GTFOBins.github.io
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
Language:HTML0 0
wivd/HackBrowserData
Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。
Language:Go0 0
wivd/HackReport
渗透测试报告/资料文档/渗透经验文档/安全书籍
Language:Python0 0
wivd/handy-sshd
Portable SSH Server
Language:Go0 0
wivd/Havoc
The Havoc Framework.
Language:Go0 0
wivd/HTML_TOOLS
不定期分享一些html小工具
Language:HTML0 0
wivd/HTTPServerGO
这是一个用Go编写的红队内网环境中一个能快速开启HTTP文件浏览服务的小工具，能够执行shell命令,可以执行webshell
Language:Go0 0
wivd/jimi
Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch jimi has developed into a fully fledged IT automation platform which effortlessly integrates with your existing tools unlocking the potential for autonomous IT and Security operations.
Language:Python0 0
wivd/JNDIMonitor
一个LDAP请求监听器，摆脱dnslog平台
Language:Java0 0
wivd/Pentest_Note
渗透测试常规操作记录
0 0
wivd/Poc-1
PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus
Language:Python0 0
wivd/Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
Language:JavaScript0 0
wivd/smbmap
SMBMap is a handy SMB enumeration tool
Language:Python0 0
wivd/Spark
✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。
Language:Go0 0
wivd/supplier
主流供应商的一些攻击性漏洞汇总
0 0
wivd/taowu-cobalt-strike
Language:PowerShell0 0
wivd/URLFinder
一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。
wivd/yarx
An awesome reverse engine for xray poc. | 一个自动化根据 xray poc 生成对应靶站的工具