{"id":14637912,"url":"https://github.com/0x7eTeam/0x7eTeamTools","last_synced_at":"2025-09-07T06:31:21.561Z","repository":{"id":214495517,"uuid":"736684176","full_name":"0x7eTeam/0x7eTeamTools","owner":"0x7eTeam","description":"javafx练习,JS接口提取,漏洞检测","archived":false,"fork":false,"pushed_at":"2024-01-24T12:16:35.000Z","size":5965,"stargazers_count":213,"open_issues_count":7,"forks_count":12,"subscribers_count":5,"default_branch":"main","last_synced_at":"2024-09-11T03:44:08.212Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/0x7eTeam.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2023-12-28T15:21:02.000Z","updated_at":"2024-09-05T01:00:14.000Z","dependencies_parsed_at":"2024-01-17T04:50:53.900Z","dependency_job_id":null,"html_url":"https://github.com/0x7eTeam/0x7eTeamTools","commit_stats":null,"previous_names":["0x7eteam/0x7eteamtools"],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0x7eTeam%2F0x7eTeamTools","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0x7eTeam%2F0x7eTeamTools/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0x7eTeam%2F0x7eTeamTools/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0x7eTeam%2F0x7eTeamTools/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/0x7eTeam","download_url":"https://codeload.github.com/0x7eTeam/0x7eTeamTools/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":232183008,"owners_count":18484721,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-10T02:01:23.813Z","updated_at":"2025-01-02T10:31:06.751Z","avatar_url":"https://github.com/0x7eTeam.png","language":"Java","funding_links":[],"categories":["Java"],"sub_categories":[],"readme":"\n\n# 0x7eTeamTools\n\n  \u003cp align=\"center\"\u003e\n    \u003cbr /\u003e\n          \u003cbr /\u003e\n\u003ca href=\"https://github.com/0x7eTeam/0x7eTeamTools/stargazers\"\u003e\u003cimg alt=\"GitHub stars\" src=\"https://img.shields.io/github/stars/0x7eTeam/0x7eTeamTools\"/\u003e\u003c/a\u003e\n\u003ca href=\"https://github.com/0x7eTeam/0x7eTeamTools/releases\"\u003e\u003cimg alt=\"GitHub releases\" src=\"https://img.shields.io/github/release/0x7eTeam/0x7eTeamTools\"/\u003e\u003c/a\u003e\n\u003ca href=\"https://github.com/0x7eTeam/0x7eTeamTools/blob/main/LICENSE\"\u003e\u003cimg alt=\"License\" src=\"https://img.shields.io/badge/License-Apache%202.0-blue.svg\"/\u003e\u003c/a\u003e\n\u003ca href=\"https://github.com/0x7eTeam/0x7eTeamTools/releases\"\u003e\u003cimg alt=\"Downloads\" src=\"https://img.shields.io/github/downloads/0x7eTeam/0x7eTeamTools/total?color=brightgreen\"/\u003e\u003c/a\u003e\n\u003cbr\u003e\n\u003cbr\u003e\n    \u003cbr /\u003e\n    \u003ca href=\"https://github.com/0x7eTeam/0x7eTeamTools/releases\"\u003e下载程序\u003c/a\u003e\n    ·\n    \u003ca href=\"https://github.com/0x7eTeam/0x7eTeamTools/issues\"\u003e反馈Bug|提交需求\u003c/a\u003e\n\n  \u003c/p\u003e\n## 更新记录\n\n0x7eTeamTools v1.2\n\t\t\n         2024年1月24日\n\t\t\t1、bug修复\n\t\t\t2、修复了接口爬取但是响应码为404\n\n0x7eTeamTools V1.1\n\t\t\n         2024年1月17日\n\t\t \n\t\t\t开源\n\t\t\t\n         2024年1月12日\n            \n            1、修复了反弹shell命令生成功能bug\n            2、修复了某些页面鼠标滚轮功能bug\n            3、新增了js接口的一些处理逻辑\n              3.1针对型如../xx.js、./xx.js、//xx.js等js爬取做了修复\n              3.2针对型如../func、./func、/func等接口处理做了修复\n\n\n![](./images/index_PAGE.png)\n\n\n\n## 一、软件介绍\n\n该工具就是作者练习javafx的产物，并没有高深莫测的功能，给自己的礼物。\n\n基本内容\n\n设置 \n\n​\t\t\t代理-----推荐socks\n\n​\t\t\tAPI配置\n\n基本工具\n\n​\t\t\t常用命令（爆破、文件上传、RDP相关、防火墙相关、Linux应急）\n\n​\t\t\t编码转换（Base64、Unicode、url编码、字符串反转、ASCII、rot13、摩斯）\n\n​\t\t\t反弹shell\n\n​\t\t\t字典生成\n\n​\t\t\t杀软识别\n\n​\t\t\t DNSLOG(命令执行场景、SQL注入场景、XXE场景、其余中间件场景)\n\n空间测绘\n\n​\t\t\tFoFa\n\n​\t\t\t鹰图\n\n​\t\t\tQuake360\n\n漏洞检测与利用\n\n​\t\t\t调用py脚本，可以导入url,也可以从空间测绘send过来\n\n内网渗透\n\n​\t\t\t横向移动(impacket-0.11.0的聚合)\n\n​\t\t\tPTT\n\n​          密码喷洒\n\n数据库\n\n​\t\t\tMYSQL\n\n​          ORACLE\n\nJS接口\n\n​\t\t\t实现从网址导出js,从js导出接口，接口的存活探测\n\n辅助网站\n\n​\t\t\t一些常用的渗透辅助站点收集\n\n\n\n## 二、软件使用\n\n其余功能比较简单，只介绍漏洞检测和JS接口\n\n### 漏洞检测\n\n第一步：先配置各种API\n\n![](images/seeting.png)\n\n第二步：选择一个空间测绘\n\n![](images/poc-1.png)\n\n第三步：选择自己的脚本，检测即可\n\n脚本编写要求【可以参考模板】\n\n​\t1、要求只从控制台获取一个参数，内容是url\n\n   2、检测的结果请输出之控制台\n\n   3、代理需要自己加到py里面\n\n\n![](images/poc-2.png)\n\n\n\n### 内网横向\n\npy调用的`impacket-0.11.0`\n\n![](images/wmiexec.png)\n\n![](images/smbexec.png)\n\n### JS接口\n\n第一步：输入网址 获取js\n\n![](images/js-1.png)\n\n第二步，挑选一个感觉有接口的js\n\n这里的js不能有参数\n\n![](images/js-2.png)\n\n第三步：(可选)，观察结果，如果有特定的目录，可以添加在前面\n\n第四步：选择请求方式，然后点击`获取接口状态`即可\n\n![](images/js-3.png)\n\n结果\n\n![](images/js-4.png)\n\n有建议和需求可提 ISSUE \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0x7eTeam%2F0x7eTeamTools","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F0x7eTeam%2F0x7eTeamTools","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0x7eTeam%2F0x7eTeamTools/lists"}