brianwei1997 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

aes_encrypt_bmp

Encrypt Bmp file with AES encrypt algorithm

awesome-poc

一个漏洞POC知识库

bililive-go

一个直播录制工具

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

cobalt-strike

Resources About Cobalt Strike. 100+ Tools And 200+ Posts.

combined-scanner

Just a scanning script that founding fingerprints that lead to vulnerabilities. Concluded from daily works

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

cve-2023-33246_rocketmq_rce_exploit

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

deserial_sink_with_jdbc

Some ReadObject Sink With JDBC

dingtalk-rce

foxmagiskmodulemanager

A module manager for Magisk because the official app dropped support for it

frog-auth

🐸Unauthorized Detection Framework未授权访问检测框架

hash_python

A small python script use for experimenting SHA1 security

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

mysql-fake-server

MySQL Fake Server (纯Java实现，内置常见Java反序列化Payload，支持GUI版和命令行版，提供Dockerfile)

node-douyu-email-notification

Node.js小脚本 斗鱼tv开播提醒(邮件通知)

oss-stinger

利用oss实现http转发/cobalt strike上线

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

rogue_mysql_server

A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.

serverstatus-toyo

云探针、多服务器探针、云监控、多服务器云监控，演示：

shadowsocks_install

Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu

shiro-exploit

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

spring4shell-poc

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

sunlogin_rce_

某日葵远程rce

unauthorized-check

扫描常见未授权访问（redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop）