microvorld Goto Github PK

2021hvv_vul

2021hvv漏洞汇总

active-directory-pentest-notes

个人域渗透学习笔记

ai-machine-learning-security

一个关于人工智能渗透测试分析系列

awesome-red-teaming

List of Awesome Red Teaming Resources

badcode

恶意代码逃逸源代码 http://payloads.online

bbscan

A fast vulnerability scanner

behinder

Behinder source code

behinderclientsource

冰蝎客户端源码-3.0-BETA6

callback_shellcode_injection

POCs for Shellcode Injection via Callbacks

chengdu_house_knowledge

🏡成都购房知识

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrike

CobaltStrike's source code

cobaltstrike-file

cobaltstrike_4.3_source

Cobaltstrike4.3源码

cve-2021-22986

F5 BIG-IP/BIG-IQ iControl Rest API SSRF to RCE

detectav

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

eggatewaygetshell

锐捷EG易网关批量GetShell / Code By:Tas9er

encodetool

go语言编码工具，练手项目

eqgrp-free-file

Free sampling of files from the purported Equation Group hack.

exchange-ssrf-rce

exchange-ssrf-rce

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

grapchromepass

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

impacket

Impacket is a collection of Python classes for working with network protocols.

jndi-inject-exploit

解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入

jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jndikit

JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）

log4j-payload-generator

Log4j jndi injects the Payload generator

memshell

FilterBased/ServletBased in memory shell for Tomcat and some other middlewares