miner67 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

aggressor-vysec

agnes

android上的wifi钓鱼应用

angr-doc

Documentation for the angr suite

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

awd_auto_attack_framework

AWD 自动化攻击框架

awesome-windows-exploitation

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

backdoor_rootkit

betwixt

:zap: Web Debugging Proxy based on Chrome DevTools Network panel.

china_ip_list

cknife

Cknife

cve-2018-1111

Environment for DynoRoot (CVE-2018-1111)

cve-2018-8120

CVE-2018-8120 Windows LPE exploit

dsvw

Damn Small Vulnerable Web

ethertokens

created by miner67

everyday-update-cn-isp-ip

每日更新的电信IP段，联通IP段，铁通IP段和移动IP段(http://ispip.clang.cn/)

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

firewall

美国国家安全局NSA下属方程式黑客组织（Equation Group）被The Shadow Brokers（影子经纪人）hack出来的并免费分享的源码

fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp

警惕 一种针对红队的新型溯源手段!

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

how2heap

A repository for learning various heap exploitation techniques.

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

metasploit-framework

Metasploit Framework

micro8

miner67.github.io

For blog

ms15-034

POC MS15-034