brianwrf Goto Github PK

brodomain

兄弟域名查询

browser-sec-whitepaper

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

checkvt

This is Python script to calculate SH256 for all files under the defined file path and check the scanning results on VirusTotal.com

chinese-poetry

最全中华古诗词数据库, 唐宋两朝近一万四千古诗人, 接近5.5万首唐诗加26万宋诗. 两宋时期1564位词人，21050首词。

cjexploiter

Drag and Drop ClickJacking exploit development assistance tool.

cknife

Cknife

clair

Vulnerability Static Analysis for Containers

cloudresetpwdagent

CloudResetPwdAgent for CloudOS(Windows and Linux) Password Resetting.

cmsmap

CMSmap is a python open source CMS (Content Management System) scanner that automates the process of detecting security flaws of the most popular CMSs.

commix

Automated All-in-One OS Command Injection and Exploitation Tool

crackmapexec

A swiss army knife for pentesting Windows/Active Directory environments

create_ap

This script creates a NATed or Bridged WiFi Access Point.

csp_security_mistakes

Cloud service provider security mistakes

ctf-tools

Some setup scripts for security research tools.

cve-2006-6184

This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service or execute arbitrary code.

cve-2015-1701

Win32k LPE vulnerability used in APT attack

cve-2015-7547

Proof of concept for CVE-2015-7547

cve-2016-0051

BSoD PoC for CVE-2016-0051 (MS-016)

cve-2016-2107

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

cve-2016-3714

ImaegMagick Code Execution (CVE-2016-3714)

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2017-0785

cve-2017-4878-samples

CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html

cve-2018-11761

Apache Tika Denial of Service Vulnerability (CVE-2018-11761)

cve-2018-11788

Apache Karaf XXE Vulnerability (CVE-2018-11788)

cve-2019-6690

It is a simple PoC of Improper Input Validation in python-gnupg 0.4.3 (CVE-2019-6690).

cve-2020-0683

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

cve-2021-4034

CVE-2021-4034 1day