A well-designed cross-platform ChatGPT UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT 应用。

基于msf的后渗透协作平台 -- 前端部分

基于msf的后渗透协作平台 -- 后端部分

AD Security Intrusion Detection System

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

MSF database code, gemified

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

Tomcat-Ajp协议文件读取漏洞

远控免杀系列文章及配套工具，搜集汇总了互联网上的几十种免杀工具和免杀方法，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

Small and highly portable detection tests based on MITRE's ATT&CK.

Joomla 3.4.6 – Remote Code Execution

Solr DataImport Handler RCE

exploit for fastjson remote code execution vulnerability

Porting BlueKeep PoC from @Ekultek to actual exploits

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Nmap扫描、漏洞利用脚本

WebLogic wls9-async反序列化远程命令执行漏洞

Apache Tomcat Remote Code Execution on Windows

Repo for proof of concept exploits and tools.

Burp suite 分块传输辅助插件

镜像：https://coding.net/u/scaffrey/p/hosts/git

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

The great impacket example scripts compiled for Windows

CVE-2018-3245