xinbs Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

421pdf

421页PDF 八卦汇总

ajpfuzzer

A command-line fuzzer for the Apache JServ Protocol (ajp13)

axis-1.4-rce-poc

Axis <=1.4 远程命令执行（RCE） POC

behinder

“冰蝎”动态二进制加密网站管理客户端

blueteamtools

蓝队分析研判工具箱，自带的反编译工具对红队也有帮助，有建议欢迎给我留言

bug-project-framework

漏洞利用框架模块分享仓库

bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

caidao-aes-version

一个Burp插件，实现用AES算法透明加密原版菜刀Caidao.exe与服务器端交互的http数据流

chinese-xinhua

中华新华字典数据库。包括歇后语，成语，词语，汉字。提供新华字典API。

cisextractor

Extract CIS benchmarks from PDFs

conf-for-surge-shadowrocket

Surge Shadowrocket conf

cve-2019-0708

cve-2019-0709

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2019-11043

(PoC) Python version of CVE-2019-11043 exploit by neex

cve-2019-19781

Citrix ADC Remote Code Execution

cve-2020-0796-rce-poc

CVE-2020-0796 Remote Code Execution POC

cve-2020-5902

CVE-2020-5902 BIG-IP

cve-2020-9484

用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cyber-defence

Information released publicly by NCC Group's Cyber Defence team

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

discuz-ml-rce

discuz ml rce

disu

包含crt.sh、fullhunt、fofa、360quake、fofa、hunter、virustotal、zoomeye、rapiddns、certspotter、chaziyu、dnsscan、threatminer的一款收集子域名的集成工具。

dnspy

.NET debugger and assembly editor

easy-cat-timer

This is a very simple cat timer, made using WPF（这是一个非常简单的猫咪计时器，使用WPF制作）

emmmm

致远OA漏洞验证 ，struts2系列漏洞，jboss，weblogic，webshell(爆破的方式),thinkphp5_rce....

fastjson-rce

fastjson-1.2.47

fastjson-rce-exploit

exploit for fastjson remote code execution vulnerability

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java