etxxlq Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2022-hw-poc

2022 护网行动 POC 整理

adpeas

Powershell tool to automate Active Directory enumeration.

adsearch

A tool to help query AD via the LDAP protocol

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

allin

A flexible scanner

antenna

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

anti-honeypot

一款可以检测WEB蜜罐并阻断请求的Chrome插件

apt_t00ls

高危漏洞利用工具

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

ax

bcelcodeman

BCEL encode/decode manager for fastjson payloads

behinder

“冰蝎”动态二进制加密网站管理客户端

bloodhound

Six Degrees of Domain Admin

brute_force_dict

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

bypass-php-gd-process-to-rce

Reference: http://www.secgeek.net/bookfresh-vulnerability/

can-ctr-escape-cve-2022-0492

Test whether a container environment is vulnerable to container escapes via CVE-2022-0492

certipy

Tool for Active Directory Certificate Services enumeration and abuse

cnseay

Seay源代码审计系统

cnvd-2022-10270-lpe

基于向日葵RCE的本地权限提升，无需指定端口

commix

Automated All-in-One OS Command Injection Exploitation Tool.

commix-testbed

A collection of web pages, vulnerable to command injection flaws.

confuserex

An open-source, free protector for .NET applications

cortana-scripts

A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.

cve

Gather and update all available and newest CVEs with their PoC.

cve-2009-2698

CVE-2009-2698 compiled for CentOS 4.8

cve-2020-11651-poc

PoC exploit of CVE-2020-11651 and CVE-2020-11652

cve-2020-13151

POC for CVE-2020-13151

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura