czheisenberg Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2018-qwb-ctf

2018强网杯CTF___题目整理

50projects50days

50+ mini web projects using HTML, CSS & JS

ai-driven-waf

Artificial intelligence-driven Web Firewall 机器学习恶意 URL 检测

beef

The Browser Exploitation Framework Project

bjdctf2020_january

A CTF freshman competition organized by Hangzhou Normal University, Jiangsu University of Science and Technology, and Jiangsu University

cardinal

CTF🚩 AWD (Attack with Defense) 线下赛平台 / AWD platform - 欢迎 Star~ ✨

check-wp-cve-2020-35489

The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489

crc32

CRC32 tools: reverse, undo/rewind, and calculate hashes

cve-2021-41091

POC for CVE-2021-41091

cve-2022-21661

WordPress WP_Query SQL Injection POC

cve-2022-3590-wordpress-vulnerability-scanner

This repository contains a Python script that checks WordPress websites for the CVE-2022-3590 vulnerability, which exploits an unauthenticated blind Server-Side Request Forgery (SSRF) in the WordPress pingback feature.

cve-2022-46169-cacti-1.2.22

This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer.

cve-2023-22527_confluence_rce

CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server PoC

cve-2023-3460

Exploit for CVE-2023-3460. Unauthorized admin access for Ultimate Member plugin < v2.6.7

cve-2023-38408

PoC for the recent critical vuln affecting OpenSSH versions < 9.3p2

cve-2023-5561-poc

WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack

czheisenberg.github.io

elevatekit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

exploit-for-searchor-2.4.0-arbitrary-cmd-injection

Reverse Shell Exploit for Searchor <= 2.4.2 (2.4.0)

exploits

Pwn stuff.

fopnp

Foundations of Python Network Programming (Apress) — scripts and examples

helloflask

Hello, Flask!

inctfi

Challenge source code, handout scripts and writeups of InCTF International Edition

missing-cve-nuclei-templates

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

mycode

学习记录

phpggc

a php serialize/unseralize tools fork from ambionics/phpggc, add chinese common php framework - thinkphp漏洞工具

pysecurity

Python tutorials

revshellgen

Reverse shell generator written in Python 3. 反弹shell工具