qianniaoge's Projects
E_jinshan_RCE_Exploit
Search and extract blob files on the Ethereum Blockchain network
Ethr is a Comprehensive Network Measurement Tool for TCP, UDP & ICMP.
EV: IDS Evasion via Packet Manipulation
Terminate the eventlog thread to disable the windows eventlog
The ultimate WinRM shell for hacking/pentesting
PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
An evil RAT (Remote Administration Tool) for macOS / OS X.
EXOCET - AV-evading, undetectable, payload delivery tool
漏洞复现:打点漏洞、提权漏洞、内网漏洞
汇总平时写的一些POC&EXP
漏洞复现与poc收集,CVE-2021-21975,cve-2021-22005,CVE-2021-26295,VMware vCenter任意文件读取
图形化漏洞利用Demo-JavaFX版
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,优先更新高危且易利用的漏洞利用脚本,最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
SambaCry exploit and vulnerable container (CVE-2017-7494)
Exploit_Scripts
Pwn stuff.
'>"><img src=x onerror=alert(1) /><b>asd</b>
在科研(摸鱼)过程中,收集到的或者自己写的一些有用的(经过实战检验的)exp/poc,欢迎提交issue和PR
Scanning a network asset information script
一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
Playing around with token manipulation in C#.
Deepfakes Software For All
Fastjson姿势技巧集合
fastjson不出网利用、c3p0
Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)