dinosn Goto Github PK

sonic-utilities

Command line utilities for the SONiC project

spoolfool

Exploit for CVE-2022–22718 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

spring-core-rce

Spring core rce

ssl-kill-switch2

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

synack_burp

synackapi

synackduo

Python Duo Push API

syntoken

A quick way to retrieve your token whilst working and too lazy to fetch your phone

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode

threat_model_examples

Collection of Threat Models

u2f-zero

U2F USB token optimized for physical security, affordability, and style

vcenter_fileread_exploit

VMware vCenter earlier v(7.0.2.00100) unauthorized arbitrary file read

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

vulnerable-oauth-2.0-applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

w13scan_orig

Passive Security Scanner

w13scan_synack

w13scan custom

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

web-app-hacker-s-handbook-notes

My nots from Web application Hacker's Handbook

webforce

The Multi-Tool Web application vulnerability scanner.

weblogic

Weblogic exploits

weblogic-1

WebLogic vulnerability exploration from beginner to expert.

weblogicenvironment

WeblogicEnvironment docker setup for research

weblogicscanner

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

winpwnage

UAC bypass, Elevate, Persistence methods

xxeinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

ysoserial

forked from frohoff/ysoserial and added my own payloads.

ysoserial-modified

That repository contains my updates to the well know java deserialization exploitation tool ysoserial.

zeratool

Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems