kkin77

JINX's starred repositories

Execute-CMD-From-HKCU

Executes whatever commands are stored in HKCU\Software\Microsoft\exe as a silent CMD window

Language:C#700

360SafeBrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

Language:C#60500

sylas

根据多个不同地区进行聚合查询以获取更多 fofa 数据

Language:Go2900

Antivirus_R3_bypass_demo

分别用R3的0day与R0的0day来干掉杀毒软件

Language:C++MIT39700

JNDI-Inject-Exploit

解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入

Language:JavaMIT66300

Yasso

强大的内网渗透辅助工具集-让Yasso像风一样支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）

Language:Go156600

Sylas

新一代子域名主/被动收集工具 - Subdomain automatic/passive collection tool

Language:JavaGPL-3.048300

Fastjson-pentest

Fastjson反序列化环境，存在漏洞演示版本

Language:JavaMIT700

MySQL_Fake_Server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

Language:Python122700

JustC2file

Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)

Language:Java26600

Obfuscate

Guaranteed compile-time string literal obfuscation header-only library for C++14

Language:C++Unlicense104700

JspFinder

一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)

Language:JavaApache-2.017400

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

1700

bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework

Language:PythonMIT120100

SecMind

安全导图

25100

RustScan

🤖 The Modern Port Scanner 🤖

Language:RustGPL-3.01449200

netspy

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

Language:Go197000

wmiexec-RegOut

Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-software in lateral movement like WMIHACKER.

Language:Python28000

blueming

备份文件扫描，并自动进行下载

Language:Go13000

log4jscanner

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.

Language:GoApache-2.0156600

LinuxCheck

Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查

Language:ShellMIT178300

WMEye

WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement

Language:C#MIT36100

javaweb-codereview

Language:Java2700