uunoob's repositories
AndrewSpecial
AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
awesome-browser-exploit
awesome list of browser exploitation tutorials
BestShell
世界上最好用的php大马
browser-pwn
An updated collection of resources targeting browser-exploitation.
BurpFastJsonScan
一款基于BurpSuite的被动式FastJson检测插件
Cobalt_Strike_wiki
Cobalt Strike系列
cve_2019_0708_bluekeep_rce
bluekeep exploit
echidna
Ethereum smart contract fuzzer
EvilClippy
A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.
Fake_Sqli_Bypass
Fake框架的自动化Fuzz WAF/IDS 功能
fastjson_rce_tool
fastjson命令执行利用工具, remote code execute,JNDI服务利用工具 RMI/LDAP
frida-all-in-one
《FRIDA操作手册》by @hluwa @r0ysue
JDSRC-Small-Classroom
京东SRC小课堂系列文章
JNDI-Injection-Exploit
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
macro_pack
macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.
MaliciousMacroMSBuild
Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
metasploit-framework
Metasploit Framework
Penetration_Testing_Case
用于记录分享一些有趣的案例
pochubs
PocHubs是为了整合网上知名开源框架的漏洞详细和POC
proxy_for_sqlmap
额,我只是把两个别人的东西搞到了一起
RedTeam-Tactics-and-Techniques
Red Teaming Tactics and Techniques
RGPerson
RGPerson - 随机身份生成脚本
rogue-jndi
A malicious LDAP server for JNDI injection attacks
Scripts
Small scripts that make life better
TPscan
一键ThinkPHP漏洞检测
Web-Security-Note
Record some common Web security sites
webshell-venom
免杀webshell无限生成工具(一键吊打D盾)