Open source UI framework written in Python, running on Windows, Linux, macOS, Android and iOS

CVE-2021-22986 & F5 BIG-IP RCE

Eternalblue written in CSharp. Contains version detection, vulnerability scanner and exploit of MS17-010

CVE-2021-1732 Exploit

Open-Source PE Packer

A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.

记录自己编写、修改的部分工具

天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端，支持跨平台运行，目前基于JDK1.8开发，运行必须安装JDK或JRE 1.8，注意不能是open jdk，只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebShell通信管理的原理，目前实现了jsp、aspx、php、asp端的常用操作功能，在原基础上，优化了大文件上传下载、Socket代理的问题，修改…

🐈Medusa是一个主动+被动扫描平台，目前包含200+个漏洞 http://medusa.ascotbe.com

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

🎬 ScreenToGif allows you to record a selected area of your screen, edit and save it as a gif or video.

Ethereum miner with OpenCL, CUDA and stratum support

Apache Solr Exploits 🌟

Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。

Weaponized web shell

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

RMI 反序列化环境 一步步

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

GPU/CPU Mining script with intelligent profit-switching between miningpools, algorithms, miners, using all possible combinations of devices (NVIDIA, AMD, CPU). Features: actively maintained, uses t…

哥斯拉

Sandfly Linux Stealth Rootkit Decloaking Utility

这是一个基于gh0st远程控制的项目，使自己更深入了解远控的原理，来编写一款自己的远控(正在编写)，项目采用VS2017

EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit, EternalBlue vulnerability detector, DoublePulsar detector and DoublePulsar Shellcode & DLL uploader

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。

fastjson一键命令执行

Hiding kernel-driver for x86/x64.

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-po…