Skip to content
View herewshow's full-sized avatar

Block or report herewshow

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
  • ARTEX Public

    Forked from mhtsec/ARTEX

    AI 自主渗透测试系统 | 百度“agent+”攻防挑战赛冠军项目

    Go GNU Affero General Public License v3.0 Updated Oct 8, 2026
  • artex-ymh Public

    Forked from panda0x123/artex-ymh

    ARTEX 二次开发版:外网突破→内网纵深全流程自主渗透平台(上游 Autumn-27/ARTEX,AGPL-3.0)

    Go GNU Affero General Public License v3.0 Updated Sep 19, 2026
  • JavaScript Updated Jul 29, 2023
  • me

    Python Updated Apr 16, 2023
  • scan4all Public

    Forked from GhostTroops/scan4all

    vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

    Go BSD 3-Clause "New" or "Revised" License Updated Aug 7, 2022
  • Serein Public

    Forked from W01fh4cker/Serein

    【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

    Python Updated Aug 4, 2022
  • nacs Public

    Forked from u21h2/nacs

    事件驱动的渗透测试扫描器 Event-driven pentest scanner

    Go Updated Aug 4, 2022
  • 404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

    Updated Aug 1, 2022
  • Hearts K-企业资产发现与脆弱性检查工具,自动化资产信息收集与漏洞扫描

    TypeScript Updated Jun 15, 2022
  • CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

    Java Updated Jun 2, 2022
  • H Public

    Forked from SiJiDo/H

    H是一款强大的资产收集管理平台

    CSS Updated Dec 29, 2021
  • 一个反编译微信小程序的工具,仓库也收集各种微信小程序/小游戏.wxapkg文件

    JavaScript MIT License Updated Sep 18, 2021
  • vulfocus Public

    Forked from fofapro/vulfocus

    🚀Vulfocus 是一个漏洞集成平台,将漏洞环境 docker 镜像,放入即可使用,开箱即用。

    Python Apache License 2.0 Updated Jul 2, 2021
  • poc Public

    Forked from czz1233/poc

    漏洞知识库

    Updated Apr 13, 2021
  • fscan Public

    Forked from shadow1ng/fscan

    一款内网扫描工具,方便一键大保健~

    Go Updated Feb 8, 2021
  • LadonGo Public

    Forked from k8gege/LadonGo

    Ladon Pentest Scanner framework 全平台LadonGo开源内网渗透扫描器框架,使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost,远程执行SSH/Winrm,密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis,端口扫描服务识别PortScan指纹识别/Htt…

    Go MIT License Updated Feb 4, 2021
  • Python Public

    Forked from geekcomputers/Python

    My Python Examples

    Python MIT License Updated Dec 26, 2020
  • K8tools Public

    Forked from k8gege/K8tools

    K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN…

    PowerShell MIT License Updated Nov 24, 2020
  • vulmap Public

    Forked from zhzyker/vulmap

    Vulmap - Web漏洞扫描和验证工具,可对Web容器、Web服务器、Web中间件以及CMS等Web程序进行漏洞扫描,并且具备漏洞利用功能。 相关测试人员可以使用vulmap检测目标是否存在特定漏洞,并且可以使用漏洞利用功能验证漏洞是否真实存在。CVE-2020-14882, CVE-2020-2555, CVE-2020-2883

    Python GNU General Public License v3.0 Updated Nov 10, 2020
  • JCE Public

    Forked from Ridter/JCE

    JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本

    Python Updated Nov 6, 2020
  • Updated Nov 3, 2020
  • Erebus Public

    Forked from DeEpinGh0st/Erebus

    CobaltStrike后渗透测试插件

    PowerShell GNU General Public License v3.0 Updated Oct 19, 2020
  • 自动签到,自动续期,高速富强

    Python Updated Oct 4, 2020
  • pystinger Public

    Forked from FunnyWolf/pystinger

    bypass firewall by webshell 一款使用webshell进行流量转发的出网工具

    Python Updated Sep 9, 2020
  • Mars Public

    Forked from TideSec/Mars

    Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

    Ruby Updated Jun 22, 2020
  • exphub Public

    Forked from zhzyker/exphub

    Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,优先更新高危且易利用的漏洞利用脚本,最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、C…

    Python Updated Jun 1, 2020
  • 远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。

    XSLT Updated May 1, 2020
  • 2018年初整理的一些内网渗透TIPS,后面更新的慢,所以公开出来希望跟小伙伴们一起更新维护~

    Updated Apr 13, 2020
  • ServerScan Public

    Forked from Adminisme/ServerScan

    ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

    Go GNU General Public License v3.0 Updated Apr 7, 2020
  • jexboss Public

    Forked from joaomatosf/jexboss

    JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

    Python Other Updated Jan 21, 2020