xiaomingdegithub's repositories
CNVD-2021-10543
CNVD-2021-10543：MessageSolution 企业邮件归档管理系统 EEA 存在信息泄露漏洞
OneForAll
OneForAll是一款功能强大的子域收集工具
unlock-music
Unlock encrypted music file in browser. 在浏览器中解锁加密的音乐文件。
kernel-exploits
Various kernel exploits
jexboss
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
Veil
Veil 3.1.X (Check version info in Veil at runtime)
nps
一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。
WeblogicScan
Weblogic一键漏洞检测工具，V1.3
android_poke
poke android ,dump dex
CVE-2019-2725
CVE-2019-2725 命令回显
Scanners-Box
A powerful hacker toolkit which has collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
penetration
渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……
CVE-2019-0708
dump
Python
All Algorithms implemented in Python
Cobalt_Strike_wiki
Cobalt Strike系列
RW_Password
此项目用来提取收集以往泄露的密码中符合条件的强弱密码
The-Hacker-Playbook-3-Translation
对 The Hacker Playbook 3 的翻译。
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Binary-files
EarthWorm/Termite 停止更新
SRC-experience
工欲善其事，必先利其器
Micro8
Gitbook
dog-tunnel
p2p tunnel,(udp mode work with kcp,https://github.com/skywind3000/kcp)
thinkphp-RCE-POC-Collection
thinkphp v5.x 远程代码执行漏洞-POC集合
POC-T
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
thinkphp_rce_poc
thinkphp v5.x 远程代码执行漏洞 poc