Beast code in Giters

fredaa982's starred repositories

wails

Create beautiful applications using Go

Language:GoMIT2378100

iis7.5-10.x-ShortNameFuzz

iis高版本短文件名猜解脚本，适用于iis7.5~10.x版本的iis中间件。

Powerful+Fast+Low Privilege Kubernetes service discovery tools via kubernetes DNS service. Currently supported service ip-port BruteForcing / AXFR Domain Transfer Dump / Coredns WildCard Dump / Pod Verified IP discovery

Language:GoMIT11400

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

Language:PythonMIT88800

SharpAdidnsdump

c# implementation of Active Directory Integrated DNS dumping (authenticated user)

Language:C#BSD-3-Clause19500

pyKerbrute

Use python to perform Kerberos pre-auth bruteforcing

Language:PythonBSD-3-Clause18200

Zentao-Captcha-RCE

禅道研发项目管理系统`misc-captcha-user`认证绕过后台命令注入漏洞

Language:Go8000

CNVD-2020-10487-Tomcat-Ajp-lfi

Tomcat-Ajp协议文件读取漏洞

Language:Python75000

searchall_lite

精简版搜集工具

Language:Go900

searchall

强大的敏感信息搜索工具

Language:Go73600

LearnFastjsonVulnFromZero-Improvement

【两万字原创】零基础学fastjson漏洞（提高篇），公众号：追梦信安

17700

smtp-user-enum

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

Language:PythonMIT11500

FOCA

Tool to find metadata and hidden information in the documents.

Language:C#GPL-3.0285900

Sunflower_get_Password

一款针对向日葵的识别码和验证码提取工具

Language:Python86600

JSFinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

Language:Python254300

rakshasa

基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

Language:GoMPL-2.098800

redis-rogue-server

Redis 4.x/5.x RCE

Language:Python50300

PPT

关于我对外做过分享的议题PPT

13700

reverse-sourcemap

:telescope: Reverse engineering JavaScript and CSS sources from sourcemaps

Language:JavaScriptMIT22600

CVE-2022-47966

POC for CVE-2022-47966 affecting multiple ManageEngine products

Language:Python12400

c-jwt-cracker

JWT brute force cracker written in C

Language:CMIT235300

burp-UnicodeAutoDecode

Burpsuite插件，Unicode自动转码为中文，提高测试效率。

Language:Python2400

SharpExchangeKing

Exchange 服务器安全性的辅助测试工具

31000

checkO365

checkO365 is a tool to check if a target domain is using O365

Language:Python8600

MeshCentral

A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.

Language:HTMLApache-2.0382900

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Language:PythonGPL-3.0524100

ysoserial-modified

That repository contains my updates to the well know java deserialization exploitation tool ysoserial.

Language:JavaMIT17500

j-is-the-boss

Language:Rust2400

Limesurvey-RCE

LimeSurvey Authenticated RCE

Language:Python600

goDomain

Windows活动目录中的LDAP信息收集工具

Language:Go23000