22-09-14 安全文章工具类早读

2-09-14

##工具推荐
https://github.com/rabbitsafe/Masscan2Httpx2Nuclei-Xray
masscan全端口扫描==>httpx探测WEB服务==>nuclei&xray漏洞扫描
2 months ago

https://github.com/lzzbb/Adinfo
域信息收集工具
23 hours ago

https://github.com/naqviO7/Creep
包含不同网络攻击工具的 Python 工具包
4个月前

https://github.com/hackerhouse-opensource/iscsicpl_bypassUAC
UAC bypass for x64 Windows 7 - 11 (无弹窗版本)
2 months ago

https://github.com/cckuailong/hostscan
自动化Host碰撞工具，帮助红队快速扩展网络边界，获取更多目标点
9 days ago

https://github.com/niudaii/crack
弱口令爆破工具。Weak Password Blaster Tool.
7 days ago

##捆绑免杀
https://github.com/Ciyfly/microwaveo
将dll exe 等转成shellcode 最后输出exe 可定制加载器模板支持白文件的捆绑 shellcode 加密
6 days ago

https://github.com/shellfeel/Ant-AntV
一个经过实战考验的免杀程序生成器
6 days ago

https://github.com/Yihsiwei/GoFileBinder
golang免杀捆绑器
on 9 Jul

##漏洞复现
https://github.com/jdr2021/ApacheSolrRCE
ApacheSolrRCE（CVE-2019-0193）一键写shell，原理是通过代码执行的java文件流写的马。
9 hours ago

https://github.com/UVScan/IoT-CVE
一些路由器漏洞
8小时前

https://github.com/Threekiii/Awesome-POC
一个各类漏洞POC知识库
23 hours ago

https://github.com/B1anda0/CVE-2021-21972
https://github.com/NS-Sp4ce/CVE-2021-21972
VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本
9 months ago

##文章推荐
https://github.com/hanc00l/wooyun_public
乌云公开漏洞、知识库爬虫和搜索爬取搜索wooyun.org public bug(vulnerability)
5年前

https://portswigger.net/research/the-seventh-way-to-call-a-javascript-function-without-parentheses
不带括号调用javascript函数的方法
12 September 2022 at 13:00 UTC

https://mp.weixin.qq.com/s?__biz=Mzg5NzU1MzM5Mw==&mid=2247510563&idx=1&sn=9f0342270d4f990ef44634693b84a4b4
防封ip解决方案之ip代理池
2022-09-13 09:47

https://www.secpulse.com/archives/186895.html
干货 | 记一次公益SRC上分思路
2022-09-07