yardian Goto Github PK

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peiqi-wiki-red

林深时见鹿，海蓝时见鲸🦌

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest_note

渗透测试常规操作记录

pentest_study

从零开始内网渗透学习

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE

post-hub

内网仓库：包含远控、提权、免杀、代理、横向、清理

python_scripts_tools

reapoc

OpenSource Poc && Vulnerable-Target Storage Box.

red-team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）查杀工具

sensitive-words

基于 DFA 算法的敏感词查找/替换

sensitive-words-detector

Sensitive words detect, search, filter.敏感词检测，查找，过滤。

sensitive-words-filter

:page_facing_up:Sensitive word filtering items provide TTMP, DFA, DAT, hash bucket, and Tire algorithm support filtering. Supports text highlighting, filtering, verdicts, and alternative interface support.敏感词过滤项目，提供TTMP、DFA、DAT、hash bucket、Tire算法支持过滤。可以支持文本的高亮、过滤、判词、替换的接口支持。

sensitive-words-filter-service

sensitive-words-filter0

sensitive-words-match

sensitive-words-web

a sensitive words web server.

sensitivewordsmatch

Go 语言实现前缀树进行敏感词检测

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

struts2-vuln-demo

Struts2漏洞实例源码

subdomain_shell

一键调用subfinder+ksubdomain+httpx 强强联合 从域名发现-->域名验证-->获取域名标题、状态码以及响应大小 最后保存结果,简化重复操作命令

tentacle

Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

thinkphp-vuln

关于ThinkPHP框架的历史漏洞分析集合

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

vulnerability_library

厂商未公开漏洞库

wechat-0day

windows-exploits

🎯 Windows 平台提权漏洞大合集，长期收集各种提权漏洞利用工具。 A large collection of rights raising vulnerabilities on the windows platform, which collects various rights raising vulnerability utilization tools for a long time.

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

xss_cheat_sheet_2020_edition

xss漏洞模糊测试payload的最佳集合 2020版