iptl-f4ck Goto Github PK

about-attack

一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

alpc-diaghub

Utilizing the ALPC Flaw in combiniation with Diagnostics Hub as found in Server 2016 and Windows 10.

apache-solr-rce

Apache Solr Exploits 🌟

awd-platform

platform for awd

cfbk

ctfdb

cve-2021-21985_exp

cve-2021-21985 exploit

cve-2021-3156

Sudo Baron Samedit Exploit

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec (CVE-2021-4034)

cve-2022-27666

Exploit for CVE-2022-27666

darthsidious-chinese

DarthSidious 中文版

ekpv12

蓝凌软件股份有限公司EKPV12

fscan-poc

强化fscan的漏扫POC库

goby_poc

goby poc or exp,分享goby最新网络安全漏洞检测或利用代码

impacket

Impacket is a collection of Python classes for working with network protocols.

iptl-f4ck.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

iptl-privilege-escalation

jndiscan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

libcsearcherx

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

multipotato

nginx-proxy-heroku

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection

python-uncompyle6

A cross-version Python bytecode decompiler

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

sunlogin_rce

向日葵 RCE

upload-labs

原始靶场环境：https://github.com/c0ny1/upload-labs 此项目原始靶场环境的开普勒安全团队修改版，重新使用PHP7编写，并且保留了原版的风味！

weakpass

个人收集的弱口令。

windows-exploits