blackgit2 Goto Github PK

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

cowtransfer-uploader

Simple Cowtransfer Uploader/Downloader in Golang

cuiri

一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

cve-2021-22005-exp

cve-2021-22205

CVE-2021-22205& GitLab CE/EE RCE

cve-2021-45232-exp

cve-2022-25636

CVE-2022-25636

cve-2022-26134

[PoC] Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE)

cve-2022-27925-poc

Zimbra RCE simple poc

cve-2022-30525

Zyxel 防火墙远程命令注入漏洞（CVE-2022-30525）

dingtalk-rce

exchange_ssrf

Some Attacks of Exchange SSRF ProxyLogon&ProxyShell

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

girsh

Automatically spawn a reverse shell fully interactive for Linux or Windows victim

godzilla

哥斯拉

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon9.1.8内置160个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

log4j-detect

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

mail-probe

邮箱探针后台管理系统

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

proxylogon

ProxyLogon Pre-Auth SSRF To Arbitrary File Write

pth_exchange

If you only have hash, you can still operate exchange

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

sillyrat

A Cross Platform multifunctional (Windows/Linux/Mac) RAT.

victorian_machinery

Proof of concept exploit for CVE-2022-30525 (Zxyel firewall command injection)

webshell

This is a webshell open source project