yishu1980 Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

adzero

Zerologon AutoExploit Tool | CVE-2020-1472

aggressor-script-cn

aggressor-script 中文翻译 aggressor-script 使用

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

apache2_backdoormod

A backdoor module for Apache2

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

cobaltstrike

CobaltStrike's source code

cobaltstrike-authfile-decrypt

Small tool to decrypt a Cobalt Strike auth file

cve-2017-16995

CVE-2017-16995（Ubuntu本地提权漏洞）

cve-2019-1003000-and-cve-2018-1999002-pre-auth-rce-jenkins

Python CVE-2019-1003000 and CVE-2018-1999002 Pre-Auth RCE Jenkins

cve-2021-21972

CVE-2021-21972 Exploit

cve-2021-21973

Proof of Concept Exploit for vCenter CVE-2021-21972

cve-2021-26084_confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 命令回显+一键getshell

cve-2021-3156

PoC for CVE-2021-3156 (sudo heap overflow)

cve-2021-3493

Ubuntu OverlayFS Local Privesc

cve-2022-32250-exploit

cve-2023-22515

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

dotnetinject

Code samples of .NET shellcode injections, weaponized for use via WebDav and mshta.exe.

exploit-development

CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002

exploitdb

The official Exploit Database repository

gitlab-cve-2021-22205

gitlab-exiftool-rce

RCE Exploit for Gitlab < 13.10.3

golang-shellcode-loader

homework-of-c-language

C/C++ code examples of my blog.

homework-of-c-sharp

C Sharp codes of my blog.

how-does-securecrt-encrypt-password

Transferred from https://github.com/DoubleLabyrinth/how-does-SecureCRT-encrypt-password

jenkins-checkscript-rce

jenkins-prce-exploit

Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/abusing-meta-programming-for-unauthenticated-rce.html