baozhazhizi Goto Github PK
Type: User
Type: User
1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
Ladon for Cobalt Strike, Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp
自动化资产收集和漏洞发现工具
基于斗象灯塔ARL修改后的版本。相比原版,增加了OneForAll、**数据库,修改了altDns
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.
基于Auto.js的辅助工具项目 (蚂蚁森林) Auto.js-based assistant tools projects (Ant Forest)
自动化爆破子域名,并遍历所有端口寻找http服务,并使用crawlergo、dirsearch、xray等工具扫描并集成报告;支持动态添加扫描到的域名至任务;
AWVS13和xray的自动化扫描脚本
工控安全
用来存储Cheetah的脚本文件
《Chrome插件开发全攻略》配套完整Demo,欢迎clone体验
Seay源代码审计系统
seeyon_rce_20190626
Tomcat-Ajp协议文件读取漏洞
锐捷NBR路由器接口存在命令注入,攻击者可远程执行命令。脚本支持批量扫描和单个cmdshell模式。
CNVD-2021-10543:MessageSolution 企业邮件归档管理系统 EEA 存在信息泄露漏洞
ShopXO download 任意文件读取漏洞批量扫描+exp
亿赛通电子文档安全管理系统-rce-exp
CNVD-2021-49104——泛微E-Office文件上传漏洞
泛微eoffice最新文件上传漏洞POC,基于2个接口自动检测
禅道开源版16.5&16.5beta1,企业版6.5&6.5beta1,旗舰版3.0&3.0beta1的前台SQL注入
WebLogic wls9-async反序列化远程命令执行漏洞
cve-2019-0604 SharePoint RCE exploit
3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
2020一些漏洞
CVE-2020-5902
批量扫描CVE-2020-5902,远程代码执行,已测试
DarkAngel 是一款全自动白帽漏洞扫描器,从hackerone、bugcrowd资产监听到漏洞报告生成、漏洞URL截屏、消息通知。
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.