rassec Goto Github PK

cve-2021-43798

CVE-2021-43798:Grafana 任意文件读取漏洞

cve-2022-0778

Proof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt

cve-2022-0778-poc

cve-2022-1802

cve-2022-21661

WordPress WP_Query SQL Injection POC

cve-2022-22947-spring-cloud-gateway

CVE-2021-42013批量

cve-2022-22954

cve-2022-22965

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

cve-2022-26134

Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)

cve-2022-29464

WSO2 RCE (CVE-2022-29464) exploit and writeup.

cve-2022-39197

CobaltStrike <= 4.7.1 RCE

cve-2022-44268-imagemagick-arbitrary-file-read-poc

CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator

cve-2022-47986

Aspera Faspex Pre Auth RCE

cve-2023-25194

cve-2023-25690-poc

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

cve-2023-27372-poc

CVE-2023-27372-SPIP-CMS-Bypass

cve-2023-33246

cve-exploits

PoCs for public CVE's I have been working on.

cve-flow

CVE Data Analysis, CVE Monitor, CVE EXP Prediction Based on Deep Learning. 1999-2020年存量CVE数据分析、监控CVE增量更新、基于深度学习的CVE EXP预测和自动化推送

cve.wang

bug公开平台

cve2022-26134exp

cve2022-26134

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

daily_scripts

日常脚本

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

darkangel

DarkAngel 是一款全自动白帽漏洞扫描器，从hackerone、bugcrowd资产监听到漏洞报告生成、漏洞URL截屏、企业微信通知。

databasetools

一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接

db-gpt

Revolutionizing Database Interactions with Private LLM Technology

db_check_tool

dbconfigreader

泛微ecology OA系统接口存在数据库配置信息泄露漏洞

dbmanage