passwa11 Goto Github PK

-cve-2024-21683-rce-in-confluence-data-center-and-server

This vulnerability allows an unauthenticated attacker to remotely execute arbitrary code on a vulnerable Confluence server. The vulnerability exists due to an improper validation of user-supplied input in the Confluence REST API. This allows an attacker to inject malicious code into the Confluence server, which can then be executed by the server

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

0xubypass

2023hvv

2023 HVV情报速递~

2023hvv_

activemq-rce

ActiveMQ RCE (CVE-2023-46604) 漏洞利用工具, 基于 Go 语言

activemqrce

用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入

advisories

Atredis Partners Security Advisories

agentcrack

不那么一样的 Java Agent 内存马

aj-report-exploit

AJ-REPORT未授权远程命令执行CNVD-2024-15077利用工具，在原版基础上增加了新的鉴权绕过以及远程命令执行方式，可以绕过最新修复。

apache-nifi-api-rce

Apache NiFi Processor RCE

apache-solr-8.3.1-rce

RCE on Apache Solr 8.3.1

arl

aurora

avevasioncraftonline

AV Evasion Craft Online 在线免杀平台

awesome-poc

一个漏洞POC知识库 目前数量 1000+

baijiang

万户oa poc综合扫描

becodaplatform

易用开发框架

bricks-temp-repo

temporary repo will be deleted later

bs_inject_sql

支持布尔盲注、时间盲注以及布尔无列名注入等sql注入脚本，采用二分算法进行查找优化

bug_submit

bundler-bypass

免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus

burpcrypto

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

bypassgodzilla

哥斯拉WebShell免杀生成 / Code By:Tas9er

cdgxstreamdeserrce

亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用

cdncheck_cn

修改：https://github.com/projectdiscovery/cdncheck

certificate-transparency-monitor---rust

This project monitor certificate transparency lists . Additional feature is that this can be used to monitor with wildcards from bugbounties

cf-backup

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

cf-cloudexploitationframework

cisco-ios-xe-scanner

CVE-2023-20198 & 0Day Implant Scanner