timeshu Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2021_hvv

2021 hw

arl

ARL官方仓库备份项目+指纹添加工具：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

awesome-java-security

Java安全☞代码审计/漏洞分析/武器化

awesome-serverless

🔥 腾讯云 云函数 SCF / Serverless 的 100 种玩法，签到，打卡，小程序，图床，刷金币等各种应用集合。

awesome-waf

🔥 Everything about web-application firewalls (WAF).

awesome_shiro

CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行，反弹shell的脚本

blog-comments

评论

bypass-av-note

免杀技术大杂烩---乱拳也打不死老师傅

bypasswaf

用于mssql手注生成混淆payload

c-jwt-cracker

JWT brute force cracker written in C

cms-hunter

CMS漏洞测试用例集合

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cobalt4.4

WIPE YOUR ASS WITH THE REAL COBALT STRIKE

code-audit

cve-2018-8120

cve-2019-11580

CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE

cve-2019-2725

CVE-2019-2725命令回显+webshell上传

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-1350

Bash Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2003 up to Windows Server 2019.

cve-2020-16898

CVE-202-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

cve-2021-20837

XMLRPC - RCE in MovableTypePoC

cve-2022-20699

Cisco Anyconnect VPN unauth RCE (rwx stack)

cve-2023-36745

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

exploits

fofax

fofaX is a command line query tool based on the API of https://fofa.so/, simple is the best!

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gost

GO Simple Tunnel - a simple tunnel written in golang

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.