jkana Goto Github PK

apache-solr-8.3.1-rce

RCE on Apache Solr 8.3.1

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

cobaltstrike

CobaltStrike's source code

cve

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

cve-2020-17144-exp

Exchange2010 authorized RCE

cve-2021-44529

CVE-2021-44529 PoC

cve-2021-45041

PoC for CVE-2021-45041

cve-2021-45897

PoC for CVE-2021-45897

cve-2022-22947-poc

CVE-2022-22947批量检测脚本，超时时间不超过2s，已更新可反弹shell的EXP，欢迎师傅们试用

cve-2022-23940

PoC for CVE-2022-23940

cve-2022-26133

Atlassian Bitbucket Data Center反序列化漏洞(CVE-2022-26133)批量验证和利用脚本

cve-2022-28219

PoC for ManageEngine ADAudit Plus CVE-2022-28219

cve-2022-42475

POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon

cve-2023-3519

cve-2023-46604

cve-2023-46604-rce-reverse-shell-apache-activemq

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

exploitremotingservice

A tool to exploit .NET Remoting Services

genericpotato

SweetPotato but for generic HTTP/SMB

gila-cms-1.16.0-shell-upload

hitcon-training

For Linux binary Exploitation

horizontcms-1.0.0-beta-shell-upload

jamf-log4j

jar-analyzer

Jar Analyzer Project

jndi-injection-exploit-plus

50+ Gadgets(20 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

pinkerton

🕵️ Pinkerton is an JavaScript file crawler and secret finder developed in Python

polyglot-xss-image

Script create polyglot-xss-image

rce

Distributed, workflow-driven integration environment

red_team_tool_countermeasures

spring-cloud-function-spel-rce

Spring-cloud-function-SpEL-RCE 批量检测脚本，反弹shell_EXP,欢迎师傅们试用