wulinpin Goto Github PK

auto_wordlists

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

custom-nuclei-templates

cve

this repository is CVE number

cve-2022-0337-poc-google-chrome-microsoft-edge-opera

🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337

cve-2022-24112

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

cve-2022-41040-poc

CVE-2022-41040 - Server Side Request Forgery (SSRF) in Microsoft Exchange Server

cve-2023-23752

Joomla! 未授权访问漏洞

cve-2023-25194

cve-2023-32315-openfire-bypass

rce

dirsearch

Web path scanner

dnmasscan

A script that can resolve an input file of domains and scan them with masscan

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

faketoa

Fake IP sources using Linux's BPF feature

firefly

Black box fuzzer for web applications

frida-intercept-encrypted-api

A tool to help you intercept encrypted APIs in iOS or Android apps

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jpeg_rce

Exiftool bug which leads to RCE

jsinfominer

jws2pubkey

jws2pubkey tool

kryptey

Android keyboard for secure E2EE communication through the signal protocol in any messenger. Communicate securely and independent, regardless of the legal situation or whether messengers use E2EE

lexmark

list-of-user-agents

List of major web + mobile browser user agent strings. +1 Bonus script to scrape :)

log4jhorizon

Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.

meg

Fetch many paths for many hosts - without killing the hosts

mind-map

各种安全相关思维导图整理收集

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

pdoc

API Documentation for Python Projects

poclist-1

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

s4s-scanner

Spring4Shell Burp Scanner