werwolfz Goto Github PK

spring-break_cve-2017-8046

This is a Java program that exploits Spring Break vulnerability (CVE-2017-8046).

spring-jndi

Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

spring4shell-poc

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

springwebflux-memshell

SpringWebflux通用内存马

sqlinjectionwiki

一个专注于聚合和记录各种SQL注入方法的wiki

ssrfuzz

SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities

struts2-scan

Struts2全漏洞扫描利用工具

struts2-vuln-demo

Struts2漏洞实例源码

sts2g

Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang

subdomainsbrute

A fast sub domain brute tool for pentesters

sudo-cve-2017-1000367

suidcheck

Linux SUID 提权检测脚本，自动分析具有 s 权限的可执行文件并给出相应的提权利用方法

sunflower_get_password

一款针对向日葵的识别码和验证码提取工具

sunlogin_rce

向日葵 RCE

suo5

一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

superman

🤖 Kill The Protected Process 🤖

svnexploit

SvnExploit支持SVN源代码泄露全版本Dump源码

taie

一键getshell集成化工具

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams

teemo

A Domain Name & Email Address Collection Tool

terraformgoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

theroadofso

学习安全运营的记录 | The knowledge base of security operation

tianji

天机是 SocialAI（来事儿AI）制作的一款免费使用、非商业用途的人工智能系统。您可以利用它进行涉及传统人情世故的任务，如如何敬酒、如何说好话、如何会来事儿等，以提升您的情商和"核心竞争能力"

tianya-docs

精心收集的天涯神贴，不带水印，方便阅读

tomcatmemshell

拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

troy

特洛伊-免杀webshell生成工具PLUS

uacme

Defeating Windows User Account Control

ultimaste-nuclei-templates

极致攻防实验室 nuclei 检测 POC