villain's repositories
2022-HW-POC
2022 护网行动 POC 整理
black-hat-go
《Black.Hat.Go》中文翻译
CVE-2023-43261
CVE-2023-43261 - Credential Leakage Through Unprotected System Logs and Weak Password Encryption
CVE-2023-46747
CVE-2023-46747 Criticle Auth Bypass
DavRelayUp
DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).
dic
渗透字典，框架信息泄露，备份文件泄露，配置文件泄露。字典
fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。
gendict
字典生成工具
gogo
面向红队的, 高度可控可拓展的自动化引擎
Golang_Puzzlers
An example project, for my column named "Core Golang - 36 lessons"
gonmap
gonmap是一个go语言的nmap端口扫描库，使用nmap开源的端口扫描策略，在效率和速度上取得一个折中的中间值，便于做大网络环境的资产测绘。
killEscaper
Shellcode 免杀生成器 绕过火绒、360（Windows版本）
Kunlun-M
KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。
Log4j2Scan-1
Log4j2 RCE Passive Scanner plugin for BurpSuite
nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
PeiQi-WIKI-Book
面向网络安全从业者的知识文库🍃
picker
将你的repo变为讨论社区
PoC-in-GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
PocList
Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE
rakshasa
基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具
Research-report-Classification-system
爬取东方财富的宏观研究的研报，基于LSTM进行情感分析，分类为正向、负向和中性三类
shiro_key
shiro key 收集
spray
Next Generation HTTP Dir/File Fuzz Tool
threat-broadcast
威胁情报播报
vulnerability-paper
收集的文章 https://mrwq.github.io/vulnerability-paper/