Shym's starred repositories
free-programming-books-zh_CN
:books: 免费的计算机编程类中文书籍,欢迎投稿
Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
shadow-tls
A proxy to expose real tls handshake to the firewall
fridaUiTools
frida工具的缝合怪
VcenterKiller
一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webshell,命令执行或者上传公钥使用SSH免密连接
RoguePotato
Another Windows Local Privilege Escalation from Service Account to System
linuxStack
Linux技术栈
spring-boot-upload-file-lead-to-rce-tricks
spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
JNDI-Injection-Exploit-Plus
80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.
CVE-2022-39197-patch
CVE-2022-39197 漏洞补丁. CVE-2022-39197 Vulnerability Patch.
Webpackfind
Webpack自动化信息收集
FinalShell-Decoder
FinallShell 密码解密GUI工具
go-ReflectiveDLL
ReflectiveDLL
FuckFingerprint
Web指纹识别工具 在线获取指纹
svcLessSpy
svc WebShell