19001085 Goto Github PK

-

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BI

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

ashare

一款阿里云盘多账户直链解析程序

awesome-hacking-tools

黑客工具收集仓库，包含主流和非主流漏洞利用工具，subdomain、备案查询工具、CVE仓库、Hacking Tools、Exploits、免杀工具、weblogic漏洞利用工具、Red Team、Cobalt Strike、C免杀、bypassAV、内网渗透工具、漏洞利用、工具插件、burpsuite插件；

backdoors

Simple linux backdoors and hiding techniques

burp_vulpscan

burp被动扫描插件，目前只有CVE-2022-22947

cve-2021-3156

CVE-2021-3156: Sudo heap overflow exploit for Debian 10

cve-2021-45232-exp

cve-2021-45232-rce

CVE-2021-45232-RCE-多线程批量漏洞检测

cve-2022-0995

CVE-2022-0995 exploit

cve-2022-22965-spring-core-rce

批量无损检测CVE-2022-22965

cve-2022-23131poc-exp-zabbix-

CVE-2022-23131漏洞批量检测与利用脚本

cve-2022-23222

CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

cve-2022-25636

CVE-2022-25636

cve-2022-26134

Confluence OGNL expression injected RCE(CVE-2022-26134) poc and exp

cve-2023-2008

Proof of concept code for CVE-2023-2008

cve-2023-25136

OpenSSH 9.1 vulnerability mass scan and exploit

ddos

DDoS Attack & Protection Tools for Windows, Linux & Android

ddos-rootsec

DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)

dnspy

.NET debugger and assembly editor

fofamap

FofaMap是一款基于Python3开发的跨平台FOFA数据采集器，支持网站图标查询、批量查询和自定义查询FOFA数据，能够根据查询结果自动去重并生成对应的Excel表格。另外春节特别版还可以调用Nuclei对目标进行漏洞扫描，让你在挖洞路上快人一步。

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

hfish

安全、可靠、简单、免费的企业级蜜罐

linux-rdp

Linux RDP Scanner and Bruteforcer Scripts

linux_dirty

更改后的脏牛提权代码，可以往任意文件写入任意内容，去除交互过程

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4jhunt

An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.

mimipenguin

A tool to dump the login password from the current linux user

ntpdos

NTP