hkzj Goto Github PK

2019_vul_warning_poc_collect

整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善

behinder

“冰蝎”动态二进制加密网站管理客户端

behinderclientsource

冰蝎客户端源码-3.0-BETA6

burpsuite-xkeys

A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.

codeanalysis

Static Code Analysis

crawlergo-to-xray

crawlergo-to-xray，可以把0Kee-Team crawlergo爬虫爬取的链接推送给长亭xray分析，xray分析后自动调用webhook接口利用server酱实时推送漏洞预警到微信，让你躺着挖漏洞。支持多线程。

cve-2020-11890

CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE

cve-2020-13942

CVE-2020-13942 unauthenticated RCE POC through MVEL and OGNL injection

cve-2020-14756

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar

cve-2021-21974

POC for CVE-2021-21974 VMWare ESXi RCE Exploit

cve-exploits

PoCs for public CVE's I have been working on.

ditto

A tool for IDN homograph attacks and detection.

eggatewaygetshell

锐捷EG易网关批量GetShell / Code By:Tas9er

exploits

Pwn stuff.

foureye

AV Evasion Tool For Red Team Ops

frpproplugin

frp0.33修改版,过流量检测,免杀,支持加载远程配置文件可用于cs直接使用的插件

getout360

强制关闭360 需要管理员权限

go_bypass

Golang Bypass Av Generator template

horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

httpsourceviewer

HttpSourceViewer是一款免费的网页html源码查看工具，通过这款软件你可以直接获取一个页面的html源码，包括html头及页面的html内容。

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

my-poc-exploits

PoC exploits I wrote. They're as is and I will not offer support

ourbank

poc

This repository contains my advisories, proof of concept files and exploits that I have made public.

poc-bomber

一款高威胁POC/EXP的集成框架，用于渗透和红队快速打点

projectsim

s2-061-exploit

针对S2-061的可视化漏洞利用工具

securitypaper-web

Security Paper