zcj2333

zcj2333's Stars

• AgonySec/ThinkPHPGUI

  使用JAVAFX写了一个Thinkphp的GUI漏洞检测利用工具

  Language:Java655

• wolfcod/lsassdump

  lsassdump via RtlCreateProcessReflection and NanoDump

  Language:C7511

• wy876/JavaCode

  分享漏洞分析，用友，致远OA，帆软，泛微

  587

• JaveleyQAQ/WeChatOpenDevTools-Python

  WeChatOpenDevTool 微信小程序强制开启开发者工具

  Language:Python2.4k640

• Ackites/KillWxapkg

  自动化反编译微信小程序，小程序安全评估工具，发现小程序安全问题，自动解密，解包，可还原工程目录，支持Hook，小程序修改

  Language:Go4.1k880

• runassu/chrome_v20_decryption

  Chrome COOKIE v20 decryption PoC

  Language:Python517

• Marven11/EtherGhost

  新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell

  Language:Python47535

• varwara/CVE-2024-35250

  PoC for the Untrusted Pointer Dereference in the ks.sys driver

  Language:C25256

• mertdas/SharpIncrease

  A Tool that aims to evade av with binary padding

  Language:C#14127

• JKme/cube

  内网渗透测试工具，弱密码爆破、信息收集和漏洞扫描

  Language:Go59765

• momosecurity/FindSomething

  基于chrome、firefox插件的被动式信息泄漏检测工具

  Language:JavaScript1.1k115

• vpxuser/Central-Management-System-Exploitation-Cheat-Sheet

  内网集权系统渗透测试笔记

  10

• isno/theByteBook

  ⭐ 【开源书籍】深入讲解内核网络、Kubernetes、ServiceMesh、容器等云原生相关技术。经历实践检验的 DevOps、SRE指南。如发现错误，谢谢提issue

  Language:JavaScript7.7k517

• milu001/sundeskQ

  向日葵密码提取、todesk密码提取，ID、临时密码，安全密码读取工具

  28922

• howmp/reality

  grs内网穿透工具通过reality协议隐藏特征

  Language:Go25422

• 0xchang/DockerApiRCE

  DockerApiRCE

  19113

• bit4woo/Fiora

  Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。

  Language:Java1.2k143

• NotSoSecure/Blacklist3r

  project-blacklist3r

  Language:C#51182

• blacklanternsecurity/badsecrets

  A library for detecting known secrets across many web frameworks

  Language:Python53948

• kezibei/Urldns

  Language:Java30341

• for-A1kaid/CodeAudit

  记录一些代码审计过的源码

  14017

• jdr2021/OSSFileBrowse

  存储桶遍历漏洞利用工具

  Language:Java29115

• winezer0/APIFinderPlus

  目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查

  Language:Java1756

• Chanzi-keji/chanzi

  "chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability rules, supports decompilation, custom rule creation, and is compatible with the technology stacks of Servlet & filter, Spring, Dubbo, Thrift, JAX-RS, JFinal, Netty, MyBatis, and JSP.

  32512

• charonlight/SpringExploitGUI

  一款Spring综合漏洞的利用工具，工具支持多个Spring相关漏洞的检测以及利用

  24713

• c0r1/BypassPro

  AutoBypass403-BurpSuite 插件二开重构，优化执行逻辑

  Language:Java2589

• cube0x0/MiniDump

  C# Lsass parser

  Language:C#28248

• BBD-YZZ/week-passwd

  FTP,SSH,MYSQL,MSSQL等弱口令爆破工具！

  36031

• Maka8ka/NGLite

  A major platform RAT Tool based by Blockchain/P2P.Now support Windows/Linux/MacOS

  Language:Go382116

• synacktiv/CVE-2024-45409

  Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit

  Language:Python7413