hack404-007 Goto Github PK

ctf-all-in-one

CTF竞赛入门指南

ctf-tools

Some setup scripts for security research tools.

ctf-wscan

为ctf而生的web扫描器

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / any other payload to victim without any complex configuration.

cve-2018-11235

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

cve-2019-0708

收集网上CVE-2018-0708的poc和exp(目前没有找到exp)

cve-2019-17558_solr_vul_tool

CVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.

cve-2019-7238_nexus_rce_tool

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

cve-2020-0796-smb

该资源为CVE-2020-0796漏洞复现，包括Python版本和C++版本。主要是集合了github大神们的资源，希望您喜欢~

cve-2020-10199_cve-2020-10204

CVE-2020-10199、CVE-2020-10204漏洞一键检测工具，图形化界面。CVE-2020-10199 and CVE-2020-10204 Vul Tool with GUI.

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

cve-2021-22205

CVE-2021-22205 Unauthorized RCE

cve-2021-26084

CVE-2021-26084 - Confluence Server Webwork OGNL injection (Pre-Auth RCE)

cve-2021-26084_confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 命令回显+一键getshell

cve-2021-3493

Ubuntu OverlayFS Local Privesc

cve-2021-40444

CVE-2021-40444 PoC

cve-2022-23131

cve-2022-47966

POC for CVE-2022-47966 affecting multiple ManageEngine products

cve-reverse

darknet_chinesetrading

🚇暗网中文网监控爬虫(DEEPMIX)

dbj

大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

dcpwn

an impacket-dependent script exploiting CVE-2019-1040

ddns

:triangular_flag_on_post: 自动更新域名解析到本机IP(支持dnspod,阿里DNS,CloudFlare,华为云,DNSCOM...)

ddos

Anti-DDoS Pro

decrypt_weblogic_password

搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。

dingtalk-rce

dirbrute

多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

ditto

A tool for IDN homograph attacks and detection.

dns-flood

Automatically exported from code.google.com/p/dns-flood