30579096 Goto Github PK

webshell-cli

A simple command line interface for webshells

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

websphere-wsif-gadget

CVE-2020-4464 / CVE-2020-4450

wef

Wi-Fi Exploitation Framework

whatwaf

Detect and bypass web application firewalls and protection systems

whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

winpwn

Automation for internal Windows Penetrationtest / AD-Security

winrpctest

利用RPC服务，批量探测内网Windows出网情况

wmihacker

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

wsmemshell

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

wsuspendu

Implement WSUSpendu attack

xlsxpoison

Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xray-crack

xray社区高级版证书生成，仅供学习研究，正常使用请支持正版

xstream-vul-poc

XStream相关漏洞POC及分析复现环境

xxl-job-rce

xxl-job未授权命令执行

yakit

yak gRPC Client GUI - 集成化单兵工具平台

yaml-payload

Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg

yaml-payload-for-ruoyi

A memory shell for ruoyi

yaml-payload-for-win

用于windows反弹shell的yaml-payload

yapi_rce

Yapi RCE漏洞批量验证与伪交互SHELL

yapirce

Code By:Tas9er / YApi接口管理平台远程命令执行

yonyou-rce

用友NC BeanShell远程代码执行 批量检测和利用工具 CNVD-2021-30167

yonyounc_tip

ysoserial

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

zabbix-saml-bypass-exp

cve-2022-23131 exp

zentao

zentao-rce

zer0dump

Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.

zerotrust

Simple script to deploy easily Zero Trust in an internal Network