nali Public

一个查询IP地理信息和CDN服务提供商的离线终端工具.An offline tool for querying IP geographic information and CDN provider.

weaverOA_sql_RCE Public

泛微OA某版本的SQL远程代码执行漏洞

0day Public

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

fscan-POC Public

强化fscan的漏扫POC库

CVE-2021-44529 Public

CVE-2021-44529 Ivanti EPM 云服务设备 (CSA) 中的代码注入漏洞允许未经身份验证的用户以有限的权限(nobody)执行任意代码。

go-sec-code Public

Go相关的安全研究

CVE-2022-22954-VMware-RCE Public

CVE-2022-22954-VMware-RCE批量检测POC

cobaltstrike-beacon-data Public

Open Dataset of Cobalt Strike Beacon metadata (2018-2022)

tfsec Public

Security scanner for your Terraform code

nuclei-burp-plugin Public

Nuclei plugin for BurpSuite

REDIS-CVE-2022-0543 Public

Redis沙盒逃逸漏洞复现(CVE-2022-0543)

log4j2_rce Public

log4j2 rce、poc

theZoo Public

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

APT_REPORT Public

Interesting apt report collection and some special ioc express

CTF Public

关于我在CTF中的所有东西

sec-docker Public

常用安全工具 docker自动生成仓库

rulex Public

FBI-tools Public

Tools for gathering information and actions forensic

ysoserial Public

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

CVE-2022-22947-POC Public

CVE-2022-22947批量检测脚本,回显命令没进行正则,大佬们先用着,后续再更

godlp Public

sensitive information protection toolkit

domainNamePredictor Public

一个简单的现代化公司域名使用规律预测及生成工具

DeepBlueCLI Public

APT-Hunter Public

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover su...

defsec Public

Common IaC security check definitions for tfsec and cfsec

Banli Public

Banli-高危资产识别和高危漏洞扫描工具

natpass Public

新一代主机管理工具,支持web vnc和web shell

CVE-2021-32099 Public

CVE-2021-32099

ysoserial_rs Public

n-days Public