neargle's recent timeline updates

neargle's repos on GitHub

Shell · 3161 watchers

re0-kubernetes-sec-archive

:atom: [WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐

JavaScript · 129 watchers

win-powerup-exp-index

🚄 火车上写的，2015年的代码和数据了

Python · 99 watchers

ver-observer

🐽 Detection version of framework \ CMS \ dev-dependence on target website.

Shell · 81 watchers

cloud_native_security_test_case

🌶 一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]

Python · 56 watchers

PIL-RCE-By-GhostButt

Exploiting Python PIL Module Command Execution Vulnerability

Python · 40 watchers

tips-note

做过的实验，踩过的坑

26 watchers

cdk_document

🌏 [WIP]整理好了之后迁移到 cdk-team/document，包含各类容器、K8s攻防场景的CDK文档。

C · 24 watchers

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC : golang 'go get' remote command execution during source code build

21 watchers

public-dns-list

Public Verified DNS List (Keep updating).

HTML · 21 watchers

SecNewsBak

背景： https://weibo.com/5084870733/E6GfkarzQ

Python · 12 watchers

django-cve-hub

复现Django漏洞时的部分环境,推荐使用virtualenv还原部分漏洞

Go · 9 watchers

syslog

Golang - 获取Windows & Linux登录日志并正则解析

JavaScript · 7 watchers

hacking-extensions

Hacking chrome extensions!

Go · 6 watchers

CDK

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

HTML · 6 watchers

neargle.github.io

用于分享技术和交友的博客 https://blog.neargle.com/

6 watchers

npm_evil_package

npm_evil_package

HTML · 6 watchers

wooyun_articles

drops.wooyun.org 乌云Drops文章备份

4 watchers

neargle

✨special ✨? Simple message from neargle.

HTML · 3 watchers

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

3 watchers

awesome-security-weixin-official-accounts

网络安全类公众号推荐

JavaScript · 3 watchers

BlueLotus_XSSReceiver

XSS平台 CTF工具 Web安全工具

Go · 2 watchers

beego

beego is an open-source, high-performance web framework for the Go programming language.

Python · 2 watchers

Blasting_dictionary

爆破字典

2 watchers

crx-scouter

🕵️‍♂️ 🔎 🕸️ I Know U Have Installed These Chrome Extensions Below.

2 watchers

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

C++ · 2 watchers

PCShare

PCShare是一款强大的远程控制软件，可以监视目标机器屏幕、注册表、文件系统等。

PHP · 2 watchers

WebShell

WebShell Collect

HTML · 2 watchers

xxxx

XXXX

Go · 1 watchers

beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash

1 watchers

betterdefaultpasslist

Go · 1 watchers

brutemachine

A Go library which main purpose is giving an interface to loop over a dictionary and use those words/lines as input for some custom logic such as HTTP file bruteforcing, DNS bruteforcing, etc.

Python · 1 watchers

F-MiddlewareScan

A vulnerability detection scripts for middleware services

1 watchers

IncExtensiveList

从扫描器结果分离出的一些大公司泛解析ip列表

1 watchers

Mind-Map

各种安全相关思维导图整理收集

1 watchers

OWAduit

Python · 1 watchers

pyvulhunter

python audit tool 审计注入 inject

Python · 1 watchers

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

PHP · 0 watchers

ChairoCodes

Chairo's Codes

0 watchers

collection-document

Collection of quality safety articles

PHP · 0 watchers

d3-process-map

Web application to illustrate the relationships between objects in a process using d3.js.

Shell · 0 watchers

dockerfile-msf

C · 0 watchers

docs

Tips, Tricks, and Suggestions for Running a CTF

Perl · 0 watchers

EQGRP

Decrypted content of eqgrp-auction-file.tar.xz

Python · 0 watchers

F-Scrack

Python · 0 watchers

FileSensor

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

JavaScript · 0 watchers

flowchart.js

Draws simple SVG flow chart diagrams from textual representation of the diagram

HTML · 0 watchers

google.github.io

Python · 0 watchers

GourdScanV2

被动式漏洞扫描系统

Python · 0 watchers

hosts

一堆神奇的必须公开的测试文件🤣

0 watchers

landscape

🌄 The Cloud Native Interactive Landscape filters and sorts hundreds of projects and products, and shows details including GitHub stars, funding or market cap, first and last commits, contributor counts, headquarters location, and recent tweets.

C · 0 watchers

LCTF2017

Source code, writeups and exps in LCTF2017.

Python · 0 watchers

poc

poc from bugscan beebeeto

C# · 0 watchers

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Python · 0 watchers

pymetasploit

A full-fledged msfrpc library for Metasploit framework.