Name: backlion
Type: User
Company: 渗透测试研究中心公众号【渗透测试研究中心】
Bio: Penetration Testing,WEB Security Research,Red Team, penetration testing and Research Center --->>http://www.cnblogs.com/backlion
Location: **成都
Blog: http://www.cnblogs.com/backlion
backlion's Projects
CVE-2021-22005 - VMWare vCenter Server File Upload to RCE
CVE-2021-22986 & F5 BIG-IP RCE
com_media allowed paths that are not intended for image uploads to RCE
CVE-2021-26855 exp
CVE-2021-30128 Apache OFBiz 反序列化漏洞远程代码执行
Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129)
Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature
Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature
Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature
Recursive MMIO VM Escape PoC
CVE-2021-4034 1day
CVE-2021-40346 PoC (HAProxy HTTP Smuggling)
Apache Log4j 远程代码执行
CVE-2022-0185
CVE-2022-0995 exploit
Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion
CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation
CVE-2022-39197(CobaltStrike XSS <=4.7) POC
Exploits for various CVEs
Cobalt Strike AggressorScripts CVE-2020-0796
Send CVE information to the specified mailbox (from Github)
cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vulnerabilities & PoCs
A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
cybersecurity toolbox