yaunsky Goto Github PK

2021hw-exp

2021年hvv期间收集的漏洞POC；EXP；其他项目里有某些相关漏洞的利用脚本

bad-bpf

A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

clusterengine_exp

浪潮ClusterEngine v4 命令执行; 漏洞检测

cve-2017-11610

Supervisord远程命令执行漏洞脚本

cve-2020-13937

Apache Kylin API未授权访问漏洞;CVE-2020-13937;Apache Kylin漏洞

cve-2020-17519-apache-flink

CVE-2020-17519; Apache Flink 任意文件读取; 批量检测

cve-2021-21972

cve-2021-25646

Apache Druid 远程代码执行;检测脚本

cve-2021-3156

cve-2021-3156;sudo堆溢出漏洞；漏洞检测

cve-202122986-exp

F5 BIG-IP远程代码执行；cve-2021-22986，批量检测；命令执行利用

cvescript

emailverifiy

验证邮箱真实性，对Tzeross师傅的代码稍作了修改

emergencyresponse

Linux服务器应急响应简单脚本

libbpf-bootstrap

Scaffolding for BPF application development with libbpf and BPF CO-RE

nacos-poc

oa-exp

红队工具：各大OA利用工具，万户、致远、通达等

passtojs

爆破js加密的后台登陆；JS加密；爆破密码；PyExecJS

poc

收集整理漏洞EXp/POC

s2-061-rce

s2-061批量扫描兼命令执行exp

sangforedr

深信服edr远程命令执行

seeyon_fileupload

致远oa文件上传；批量检测；getshell

solrfileread

apache solr 任意文件读取 exp

sshd_backdoor

/root/.ssh/authorized_keys evil file watchdog with ebpf tracepoint hook.

sshpam

记录ssh或sudo明文密码

thinkadminreadfile

ThinkAdmin任意文件读取

triplecross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

unomi-cve-2020-13942

CVE-2020-13942 Apache Unomi 远程代码执行漏洞脚getshell

webshell

webshell免杀收集，逐步添加

yaunsky.github.io