f1ashine

PentestLog

notes some projects in github

encrypt_server

MemoryShellLearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

DictGenerator

Fuzz_dic

参数 | 字典 collections

webshell

This is a webshell open source project

arltest

ashxLessSpy

ashx China Chopper WebShell

Caesar

一个全新的敏感文件发现工具

CodeReviewTools

通过正则搜索、批量反编译特定Jar包中的class名称

CVE-2017-7921

CVE-2017-7921-EXP Hikvision camera

CVE-2020-2883

Weblogic coherence.jar RCE

EBurst

这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。

f1ashine.github.io

fastjsonVul

fastjson 80 远程代码执行漏洞复现

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

JSFinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsproxy

An online proxy based on ServiceWorker

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

SpringMVC-MybatisDemo

demo...

ssm-demo

:tada:Spring+SpringMVC+Mybatis+easyUI实现简单的后台管理系统

thinkphp_rce_poc

thinkphp v5.x 远程代码执行漏洞 poc

WhatAV

windows pc 端杀毒软件识别（需要tasklist 命令执行的结果）

ysoserial

ysoserial for su18