yycunhua Goto Github PK

cve-2018-3192

CVE-2018-3191-PoC

cve-2022-0847-dirtypipe-exploit

A root exploit for CVE-2022-0847 (Dirty Pipe)

cve-2022-34918

CVE-2022-34918 netfilter nf_tables 本地提权 POC

cve-2022-39197

cve-2022-39197 poc

cve-2022-47966_checker

Run on your ManageEngine server

cve-2023-24055_poc

CVE-2023-24055 PoC (KeePass 2.5x)

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

defihacklabs

Reproduce DeFi hacked incidents using Foundry.

digital-privacy

Information Protection & OSINT resources | 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

dirsearch

Web path scanner

dogcs4.4

cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)

domain_fuzz

dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

dontgo403

Tool to bypass 40X response codes.

dorabox

DoraBox - Basic Web Vulnerability Training

drip-education-homework

滴水三期课后习题答案

driverdllfinder

search for a driver/dll module that has a wanted section bigger than the size of your image

ebook-translator-calibre-plugin

A Calibre plugin to translate ebook into a specified language.

ee-outliers

Open-source framework to detect outliers in Elasticsearch events

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

enscan_go

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

evilsln

A New Exploitation Technique for Visual Studio Projects

external-protocol-flooding

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

fapro

Fake Protocol Server

fastjson

FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.

fingerprintx

Standalone utility for service discovery on open ports!

flavortown

Various ways to execute shellcode

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cross-platform CobaltStrike Beacon bypass anti-virus, supports 4.1+ version.

getsystem

webshell下提权执行命令 Reference:https://github.com/yusufqk/SystemToken