CVE-2021-44228 log4j 2.x rce漏洞检测工具，对目标链接发起get请求并利用dnslog探测是否有回显
$ python3 log4j-scan.py -h
Usage: python log4j-scan.py -u <target url>
Options:
-h, --help show this help message and exit
-u URL, --url=URL 输入需要检查的链接，如: https://ainrm.cn
-u形式传入链接
Get important strings inside [Info.plist] & and Binary file also all output of result it will be saved in [app_binary].json , [app_plist_file].json file
Industry ready custom API payload with an easy format for building Python APIs (Django/Django Rest Framework) Yosh! If you are a django backend develo
IntarKnife v1.0 a tool can be used in intarnet for easily pentesting moudle hash spray U can use this tool to spray hash on a webshell IntraKnife.exe
Springboot directory scanning
zip-symlink-payload-creator This is a simple tool to create ZIP payloads using a provided wordlist for the symlink attack (present in some file upload
Time Discretization-Invariant Safe Action Repetition for Policy Gradient Methods This repository is the official implementation of Seohong Park, Jaeky
Saltbox Sandbox Repo Community Repository for Unofficial Saltbox Add-ons Requirements Saltbox Documentation Undetermined Roles List of roles can be fo
HexCopy IDA plugin for quickly copying disassembly as encoded hex bytes. This whole plugin just saves you two extra clicks... but if you are frequentl
Threagile is an open-source toolkit for agile threat modeling:
Lnkbomb Lnkbomb is used for uploading malicious shortcut files to insecure file
log4j-poc An LDAP RCE exploit for CVE-2021-44228 Log4Shell Description This demo Tomcat 8 server has a vulnerable app deployed on it and is also vulne
😭 WSOB (CVE-2022-29464) 😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464. CVE-2022-29464 details:
This bug doesn’t exist on x86: Exploiting an ARM-only race condition How to exploit a double free and get a shell. "Use-After-Free for dummies" In thi
Docker-Vulnerability-Check Docker is an open platform for developing, shipping, and running applications OS-level virtualization to deliver software i
F2Amapper This is python script that will extract the functions call in all used DLL in an executable and then provide a mapping of those functions to
gruvbox-factory 🏭 "The main focus when developing gruvbox is to keep colors easily distinguishable, contrast enough and still pleasant for the eyes"
UnicodeToy Unicode fuzzer for various purposes Unicode based on version 14.0 features Generate the shortest xss domain payload Generate unicode str, u
Valeria_stealer- Requirements : python 3.9.2 and higher (4Feb 2022) program dete
Log4Shell-IOCs Members of the Curated Intelligence Trust Group have compiled a list of IOC feeds and threat reports focused on the recent Log4Shell ex
Overview NS-Defacer is a auto html injecter, In other words It's a auto defacer
12 Sep 28, 2022
7 Sep 30, 2022
4 Nov 24, 2021
87 Dec 28, 2022
6 Aug 18, 2022
6 Aug 02, 2022
31 Dec 19, 2022
46 Oct 30, 2022
425 Jan 07, 2023
216 Jan 08, 2023
60 Dec 10, 2022
25 Oct 14, 2022
1.2k Dec 25, 2022
103 Aug 20, 2022
3 Sep 03, 2022
430 Dec 27, 2022
33 Nov 27, 2022
3 May 05, 2022
172 Nov 17, 2022
10 Nov 19, 2022