CatCara's repositories
CVE-2018-20250
exp for https://research.checkpoint.com/extracting-code-execution-from-winrar
webrtc-ips
Demo: https://diafygi.github.io/webrtc-ips/
blog
道明君的博客
Empire
Empire is a PowerShell and Python post-exploitation agent.
LinEnum
Scripted Local Linux Enumeration & Privilege Escalation Checks
weixin_crawler
高效微信公众号历史文章和阅读数据爬虫powered by scrapy
bypass_disablefunc_via_LD_PRELOAD
bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
struts2-057-exp
s2-057 最新漏洞分析和EXP脚本
thinkphp-RCE-POC-Collection
thinkphp v5.x 远程代码执行漏洞-POC集合
juicy-potato
A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
patoolkit
PA Toolkit is a collection of traffic analysis plugins focused on security
Binary-files
调整下载方式，尝试规避域名黑名单。
EarthWorm
Tool for tunnel
PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
ashxLessSpy
ashx China Chopper WebShell
CMS-Hunter
CMS漏洞测试用例集合
mimikatz
A little tool to play with Windows security
Scrapy
practice my spider skill
WAScan
WAScan - Web Application Scanner
DomainCheck
DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.
ieaseMusic
网易云音乐第三方
mcreator
Encoded Reverse Shell Generator With Techniques To Bypass AV's
NATBypass
一款lcx在golang下的实现
sec-chart
安全思维导图集合
xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
struts-scan
Python2编写的struts2漏洞全版本检测和利用工具
CVE-2018-8120
CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7