yongsec

yongsec's Stars

• whwlsfb/JDumpSpider

  HeapDump敏感信息提取工具

  Language:Java1.3k130

• MInggongK/dahuaExploitGUI

  dahua综合漏洞利用工具

  Language:Java19321

• lijiejie/swagger-exp

  A Swagger API Exploit

  Language:JavaScript1.1k127

• whwlsfb/SpringSpider

  Spring Actuator端点的BurpSuite被动扫描插件。

  Language:Java18819

• QAX-A-Team/BrowserGhost

  这是一个抓取浏览器密码的工具，后续会添加更多功能

  Language:C#1.4k204

• P001water/fs

  符合个人渗透开发习惯的fscan

  Language:Go18722

• SafeGroceryStore/MDUT

  MDUT - Multiple Database Utilization Tools

  Language:Java1.9k224

• yuyan-sec/RedisEXP

  Redis 漏洞利用工具

  Language:Go783105

• kong030813/Z-Godzilla_ekp

  哥斯拉webshell管理工具二次开发规避流量检测设备

  77740

• ATonysan/poc-exp

  Discuss POC and Exp

  Language:Python12325

• R4gd0ll/I-Wanna-Get-All

  OA漏洞利用工具

  97777

• lcvvvv/kscan

  Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

  Language:Go3.9k515

• zema1/suo5

  一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

  Language:Java2.1k193

• MInggongK/Hikvision-

  Hikvision综合漏洞利用工具

  Language:C#30025

• nccgroup/ABPTTS

  TCP tunneling over HTTP/HTTPS for web application servers

  Language:Python724149

• fnmsd/MySQL_Fake_Server

  MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

  Language:Python1.2k145

• ffffffff0x/f8x

  红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

  Language:Shell1.7k272

• L-codes/Neo-reGeorg

  Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

  Language:Python2.8k439

• artsploit/yaml-payload

  A tiny project for generating SnakeYAML deserialization payloads

  Language:Java544103

• LFYSec/ActuatorExploit

  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE

  Language:Python23224

• Y4er/yaml-payload

  Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg

  Language:Java12814

• lemonlove7/dirsearch_bypass403

  目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别

  Language:Python70658

• shmilylty/netspy

  netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

  Language:Go1.9k207

• aleenzz/Cobalt_Strike_wiki

  Cobalt Strike系列

  2.2k576

• Threekiii/Awesome-POC

  一个漏洞POC知识库 目前数量 1000+

  3.5k735

• Threekiii/Vulnerability-Wiki

  基于 docsify 快速部署 Awesome-POC 中的漏洞文档

  Language:HTML1.6k324

• YYHYlh/Apache-Dubbo-CVE-2023-23638-exp

  Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践

  Language:Java21631

• I5N0rth/CVE-2023-33246

  Language:Java6122

• savior-only/Spring_All_Reachable

  Spring漏洞综合利用工具

  Language:Java62562

• xinyu2428/HTML_TOOLS

  不定期分享一些html小工具

  Language:HTML245