老公's starred repositories

Language:C#License:Apache-2.0Stargazers:1662Issues:0Issues:0

dir2json

Tool for efficient directory enumeration

Language:C#License:BSD-3-ClauseStargazers:52Issues:0Issues:0

NETReactorSlayer

An open source (GPLv3) deobfuscator and unpacker for Eziriz .NET Reactor

Language:C#License:GPL-3.0Stargazers:881Issues:0Issues:0

CrackMapExec

A swiss army knife for pentesting networks

Language:PythonLicense:BSD-2-ClauseStargazers:8240Issues:0Issues:0

Supershell

Supershell C2 远控平台,基于反向SSH隧道获取完全交互式Shell

License:MITStargazers:1349Issues:0Issues:0

chatGPT-CodeReview

这是一个调用chatGPT进行代码审计的工具

Language:GoStargazers:350Issues:0Issues:0

beanshooter

JMX enumeration and attacking tool.

Language:JavaLicense:GPL-3.0Stargazers:368Issues:0Issues:0

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Language:PythonLicense:NOASSERTIONStargazers:8221Issues:0Issues:0

suo5

一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

Language:JavaLicense:MITStargazers:1948Issues:0Issues:0

ExchangeOWA

一款OutLook信息收集工具

Language:JavaStargazers:226Issues:0Issues:0

VcenterKiller

一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webshell,命令执行或者上传公钥使用SSH免密连接

Language:GoLicense:Apache-2.0Stargazers:1277Issues:0Issues:0

SharpWxDump

微信客户端取证,可获取用户个人信息(昵称/账号/手机/邮箱/数据库密钥(用来解密聊天记录));支持获取多用户信息,不定期更新新版本偏移,目前支持所有新版本、正式版本

Language:C#Stargazers:4068Issues:0Issues:0

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 云手机/远程桌面/自动化取证框架,你的工作从未如此简单快捷。

Language:PythonStargazers:5673Issues:0Issues:0

deershare

小鹿快传,一款在线P2P文件传输工具,使用WebSocket + WebRTC技术

Language:JavaScriptLicense:MITStargazers:1116Issues:0Issues:0
Language:JavaStargazers:51Issues:0Issues:0

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Language:JavaScriptLicense:MITStargazers:8598Issues:0Issues:0

bbot

A recursive internet scanner for hackers.

Language:PythonLicense:GPL-3.0Stargazers:4028Issues:0Issues:0

alicloud-tools

阿里云ECS、策略组辅助小工具

Language:GoLicense:Apache-2.0Stargazers:801Issues:0Issues:0

murphysec

An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全,具备专业的软件成分分析(SCA)、漏洞检测、专业漏洞库。

Language:GoLicense:Apache-2.0Stargazers:1606Issues:0Issues:0

JNDIEXP

JNDI在java高版本的利用工具,FUZZ利用链

Language:JavaStargazers:487Issues:0Issues:0

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

Language:JavaLicense:MITStargazers:962Issues:0Issues:0

EasyPen

EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation

Language:JavaScriptStargazers:601Issues:0Issues:0

FastjsonVulns

[fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload

Language:JavaStargazers:90Issues:0Issues:0

tsh

Tiny SHell is an open-source UNIX backdoor.

Language:CStargazers:636Issues:0Issues:0

fastjson-exp

fastjson利用,支持tomcat、spring回显,哥斯拉内存马;回显利用链为dhcp、ibatis、c3p0。

Stargazers:222Issues:0Issues:0

Fastjson

Fastjson姿势技巧集合

Stargazers:1552Issues:0Issues:0
Language:JavaStargazers:782Issues:0Issues:0

postwoman

👽 A free, fast and beautiful API request builder (web alternative to Postman) https://postwoman.io

License:MITStargazers:72Issues:0Issues:0

JavaSec

a rep for documenting my study, may be from 0 to 0.1

Language:JavaLicense:Apache-2.0Stargazers:1736Issues:0Issues:0

wsMemShell

WebSocket 内存马/Webshell,一种新型内存马/WebShell技术

Language:JavaStargazers:1379Issues:0Issues:0