exp1orer Goto Github PK

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cloudexplorer-lite

开源的轻量级云管平台

cve-2021-22005

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

cve-2021-22201

CVE-2021–22201 Arbitrary file read on Gitlab

cve-2021-4034

CVE-2021-4034 1day

exchange_ssrf

Some Attacks of Exchange SSRF ProxyLogon&ProxyShell

exp1orer

Open resource script

exp1orer.github.io

The W Blog

fastadmin_upload

FastAdmin 前台文件上传RCE

fofa_spider

通过fofa api接口获取搜索结果并筛选Web资产

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

java-rce-echo

Java RCE 回显测试代码

jndi-inject-exploit

解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入

jspencounter

light-life

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

memoryshell

JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

springinspector

Java自动代码审计工具，尤其针对Spring框架，核心原理是模拟JVM栈帧进行分析，无需提供源码，通过一个JAR包即可

thinkphp6_anyfile_operation_write

ThinkPHP6任意文件操作漏洞,影响版本ThinkPHP6.0.0-6.0.1

translation

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

w_dirscan

基于Python3开发的多线程目录扫描器

weaveroa_sql_injection

泛微OA某版本的SQL注入漏洞

webshell

This is a webshell open source project

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

ysoserial

此项目为su18大佬的仓库镜像，如有问题可发issuse删库