Repositories list

• NacosRce

  Public
  Java

  •9191 forks•00 stars•00 issues•00 pull requests•Updated Jul 1, 2023Jul 1, 2023

• CVE-2023-32315-Openfire-Bypass

  Public
  openfire rce

  Java

  •3434 forks•11 star•00 issues•00 pull requests•Updated Jun 15, 2023Jun 15, 2023

• Weaver_ofslogin_vul

  Public
  组合利用泛微信息泄漏漏洞和任意用户登录漏洞，可获取全部loginId并测试登录

  Python

  •99 forks•11 star•00 issues•00 pull requests•Updated Jun 2, 2023Jun 2, 2023

• SecurityList

  Public
  A list for Web Security and Code Audit

  233233 forks•00 stars•00 issues•00 pull requests•Updated May 18, 2023May 18, 2023

• ysoserial-2

  Public
  ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

  Java

  •

  MIT License

  •120120 forks•00 stars•00 issues•00 pull requests•Updated May 5, 2023May 5, 2023

• Awesome-POC2

  Public
  一个各类漏洞POC知识库

  1k1k forks•00 stars•00 issues•00 pull requests•Updated May 4, 2023May 4, 2023

• Awesome-POC

  Public
  一个各类漏洞POC知识库

  1k1k forks•00 stars•00 issues•00 pull requests•Updated May 4, 2023May 4, 2023

• JNDIExploitnew

  Public
  Java

  •190190 forks•00 stars•00 issues•00 pull requests•Updated Apr 15, 2023Apr 15, 2023

• HexDnsEchoT

  Public
  命令执行不回显但DNS协议出网的命令回显场景解决方案（修改为使用ceye接收请求）

  Python

  •2828 forks•00 stars•00 issues•00 pull requests•Updated Mar 19, 2023Mar 19, 2023

• POChouse

  Public
  POC&EXP仓库、hvv弹药库、Nday、1day

  Python

  •275275 forks•00 stars•00 issues•00 pull requests•Updated Nov 11, 2022Nov 11, 2022

• evil-mysql-server

  Public
  evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.

  Go

  •1414 forks•00 stars•00 issues•00 pull requests•Updated Oct 23, 2022Oct 23, 2022

• hack-fastjson-1.2.80

  Public
  6363 forks•00 stars•00 issues•00 pull requests•Updated Sep 16, 2022Sep 16, 2022

• evasion-hub

  Public
  杀软对抗

  JavaScript

  •4040 forks•00 stars•00 issues•00 pull requests•Updated Sep 7, 2022Sep 7, 2022

• 2022-HW-POC

  Public
  2022 护网行动 POC 整理

  Go

  •690690 forks•00 stars•00 issues•00 pull requests•Updated Aug 2, 2022Aug 2, 2022

• tongdaoa_poc

  Public
  详见公众号

  Python

  •1515 forks•00 stars•00 issues•00 pull requests•Updated Jul 23, 2022Jul 23, 2022

• wsMemShell

  Public
  一种全新的内存马

  Java

  •230230 forks•00 stars•00 issues•00 pull requests•Updated Jun 30, 2022Jun 30, 2022

• ShellcodeLoader

  Public
  该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用

  C++

  •114114 forks•00 stars•00 issues•00 pull requests•Updated Jun 22, 2022Jun 22, 2022

• Penetration_Testing_POC

  Public
  渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql s…

  PowerShell

  •

  Apache License 2.0

  •2k2k forks•00 stars•00 issues•00 pull requests•Updated Jun 20, 2022Jun 20, 2022

• ysoserial

  Public
  ysoserial for su18

  Java

  •208208 forks•00 stars•00 issues•00 pull requests•Updated Jun 19, 2022Jun 19, 2022

• tomcat-jmxproxy-rce-exp

  Public
  Apache Tomcat JMXProxy RCE

  Go

  •

  Apache License 2.0

  •3737 forks•00 stars•00 issues•00 pull requests•Updated Jun 13, 2022Jun 13, 2022

• Awesome-Redteam

  Public
  一个红队知识仓库

  Python

  •720720 forks•00 stars•00 issues•00 pull requests•Updated May 30, 2022May 30, 2022

• 1earn

  Public
  ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

  C++

  •1.3k1.3k forks•00 stars•00 issues•00 pull requests•Updated May 29, 2022May 29, 2022

• my-re0-k8s-security

  Public
  :atom: [WIP] 整理整理过去的分享，从零开始的Kubernetes攻防 ...

  Shell

  •472472 forks•00 stars•00 issues•00 pull requests•Updated May 22, 2022May 22, 2022

• Memoryshell-JavaALL

  Public
  收集内存马打入方式

  4747 forks•00 stars•00 issues•00 pull requests•Updated May 20, 2022May 20, 2022

• Pentest101

  Public
  每周分享一些关于渗透测试的知识点

  8787 forks•00 stars•00 issues•00 pull requests•Updated May 15, 2022May 15, 2022

• wechat_info_collect

  Public
  调查取证 | 针对微信客户端的信息收集工具, 自动化提取本地PC所有的微信信息, 包括微信号, 手机号等

  Python

  •140140 forks•00 stars•00 issues•00 pull requests•Updated May 13, 2022May 13, 2022

• TomcatMemShell

  Public
  拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马

  Java

  •7676 forks•00 stars•00 issues•00 pull requests•Updated May 11, 2022May 11, 2022

• ev

  Public
  EV: IDS Evasion via Packet Manipulation

  Python

  •5454 forks•00 stars•00 issues•00 pull requests•Updated May 10, 2022May 10, 2022

• GetDomainAdmin

  Public
  获取域控权限的几种方式

  110110 forks•00 stars•00 issues•00 pull requests•Updated May 7, 2022May 7, 2022

• JNDIEXP

  Public
  JDNI在java高版本的利用工具

  Java

  •7070 forks•00 stars•00 issues•00 pull requests•Updated Apr 27, 2022Apr 27, 2022