419066074 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

0day-1

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

100-redteam-projects

A small list of projects for students of programming for cybersecurity

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2019_vul_warning_poc_collect

整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善

2021_hvv

2021 hw

2021hvv_vul

2021hvv漏洞汇总

2022-hw-poc

2022 护网行动 POC 整理

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

addsecurityexceptionandroid

adninja

Active directory Attacks and Scripts

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

advisories

Security Advisories

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation and more.

agentinjecttool

改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

androidpentest101

The motive to build this repo is to help beginner to start learn Android Pentesting by providing a roadmap.

androidreversetool

安卓逆向工具

apache-solr-rce

Apache Solr Exploits 🌟

api

Vulners Python API wrapper

apklab

Android Reverse-Engineering Workbench for VS Code

asset-hub

资产发现：资产收集、指纹识别

att-ck-learningnote

The LearningNote for ATT&CK

attackwebframeworktools

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

attck-pentester-book

ATTCK-PenTester-Book