yemoli Goto Github PK

flask_memory_shell

Flask 内存马

followhackers

godzillasource

哥斯拉源码-v3.03-godzilla

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

hlte-3.2.12

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了十种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

java-gate

Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

javasecuritylearning

记录一下 Java 安全学习历程，也算是半条学习路线了

jdbc-sqlxml-xxe

h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.

jndi

JNDI 注入利用工具

json-interop-vuln-labs

Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"

jwtpycrack

JWT 弱口令 Key 爆破以及生成 NONE 加密的无 Key 的 JWTString

kcon2021code

motan

A cross-language remote procedure call(RPC) framework for rapid development of high performance distributed services.

mysql-fake-server

MySQL Fake Server (ysoserial gadget built in and written in java)

nativerasp

nativeRasp that can hook native methods

neveryu.github.io

我的博客（Hexo + NexT + GitPage）

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

petitpotato

Local privilege escalation via PetitPotam

php-asp-trojan

PHP ASP 一句话木马，过狗一句话，附带PHP ASP 扫描器，扫描本地文件可疑代码

php_filter_chains_oracle_exploit

A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.

phpaudit-xxe

XXE - VULNSPY PHP AUDIT

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection

prepare-for-awd

AWD攻防赛脚本集合

qax_vpn_crack

奇安信VPN任意用户密码重置

redismodules-executecommand-for-windows

可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。

rogue-mysql-server

MySQL fake server for read files of connected clients