ch0ing Goto Github PK

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cve-2021-21972

CVE-2021-21972 Exploit

cve-2022-1388

K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388

cve-2022-32532

Apache Shiro CVE-2022-32532

cveproject

CVE request

cveproject-1

CVE request

django-sql-inject-env

Django SQL Injection Vulnerability Environment.

jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

luadec-openwrt

A Tools To Decompile OpenWRT Lua Bytecode (LUCI)

my_vuln

netuser

使用windows api添加用户，可用于net无法使用时.分为nim版，c++版本，RDI版，BOF版。

redteamtools

记录自己编写、修改的部分工具

super-guacamole

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql

thinkadmin

基于 ThinkPHP 基础开发平台（登录账号密码都是 admin ）

vul

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

webray.com.cn

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.