viwen194 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2021hvv_vul

2021hvv漏洞汇总

2022-hw-poc

2022 护网行动 POC 整理

ad-attack-defense

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

allin

A flexible scanner

attck-tools-library

TimelineSec ATT&CK 工具库

badpotato

Windows 权限提升 BadPotato

behinderclientsource

冰蝎客户端源码-3.0-BETA11.t00ls

burpextend

基于Burp插件开发打造渗透测试自动化

caa

CaA - BurpSuite Collector and Analyzer

captcha-killer

burp验证码识别接口调用插件

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

chaos-client

Go client to communicate with Chaos DNS API.

chunked-coding-converter

Burp suite 分块传输辅助插件

cobalt_strike_bot

CobaltStrike上线通知，飞书群聊机器人、server酱通知

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

cve-2022-39197

CobaltStrike <= 4.7.1 RCE

dubbo

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

esd

Enumeration sub domains(枚举子域名)

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

get_domain

gobypass

Golang免杀生成工具

godpotato

godzillasource

哥斯拉源码-v3.03-godzilla

grafana-cve-2021-43798

Grafana Unauthorized arbitrary file reading vulnerability

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。