sec-db Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

a-8-code

代码示例

alipayforesttweak

iOS支付宝蚂蚁森林能量收取助手

android-ssl-trustkiller

Bypass SSL certificate pinning for most applications

aswan

陌陌风控系统静态规则引擎，零基础简易便捷的配置多种复杂规则，实时高效管控用户异常行为。

attack_defense_framework

:muscle: :triangular_flag_on_post: A framework for CTF Attack with Defense Mode

awd-platform

platform for awd

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

bad-pdf

Steal Net-NTLM Hashes with Bad-PDF

browser-security-whitepaper-2017

X41 Browser Security White Paper - Tools and PoCs

bt-waf-crack

宝塔bt网站防火墙(waf)破解

burpunlimited

This project EXTENDS BurpLoader's license. It is NOT intended to replace BurpLoader.

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

chrome_v8_exploit

A collection of 1days and solutions to challenges related to v8/chrome I developed

chunked-coding-converter

Burp suite 分块传输辅助插件

cobaltstrikesource

Cobaltstrike4.1 Source

ctf_xinetd

A docker repository for deploying pwnable challenges in CTF

ctftool

Interactive CTF Exploration Tool

cve-2017-0785

cve-2017-11882

CVE-2017-11882 Exploit accepts 109 bytes long command in maximum.

cve-2017-11882_2

CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

cve-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2018-8120

CVE-2018-8120 Windows LPE exploit

cve-2019-1458

CVE-2019-1458 Windows LPE Exploit

cve-2019-5736-poc

PoC for CVE-2019-5736

cve-2020-0601

PoC for CVE-2020-0601

dccwbypassuac

Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".

det

(extensible) Data Exfiltration Toolkit (DET)

dnsgrep

Quickly Search Large DNS Datasets

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg