Beast code in Giters

Nick's repositories

istoreos-actions

使用 GitHub Actions 云编译 iStore OS 固件

Language:Shell100

OpenWrt-AutoBuild

基于OpenWrt-Actions-Lean+Lienol-自动化在线编译脚本

Language:ShellGPL-3.0100

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

Language:CGPL-3.0000

archerysec

Centralize Vulnerability Assessment and Management for DevSecOps Team

Language:PythonGPL-3.0000

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

000

bootdoor

Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE

Language:C000

cloudstack

Mirror of Apache Cloudstack

Language:JavaApache-2.0020

edusrcurl

全国edu将近50万个域名

000

EHole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

Language:GoApache-2.0000

eyes.sh

Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.

Language:JavaScript000

grafanaExp

A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decode data_source info automatic.

000

Holmes

Website FingerPrint Recognition

Language:Go000

HummerRisk

HummerRisk 是云原生安全检测平台，提供三个方面的能力：混合云安全合规，K8S容器云安全和软件安全

Language:JavaGPL-3.0000

ivre

Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!

Language:PythonGPL-3.0000