hissec Goto Github PK

followers: 4.0 following: 0.0 repos: 53.0 gists: 0.0

Type: User

Hi there 👋

封装了一些公共库

####### 下面的信息和本库无关 ########### fastjson学习资料： http://noahblog.360.cn/blackhat-2021yi-ti-xiang-xi-fen-xi-fastjsonfan-xu-lie-hua-lou-dong-ji-zai-qu-kuai-lian-ying-yong-zhong-de-shen-tou-li-yong-2/ 1.68利用链： http://scz.617.cn:8/web/202008111715.txt

jinjava: https://securitylab.github.com/advisories/GHSL-2020-072-hubspot_jinjava/

jndi: http://t.zoukankan.com/tr1ple-p-12335098.html https://kingx.me/Restrictions-and-Bypass-of-JNDI-Manipulations-RCE.html

jdbc: https://reposhub.com/java/distributed-databases/su18-JDBC-Attack.html https://copyfuture.com/blogs-details/20210619124317409h

XXE: https://zhuanlan.zhihu.com/p/265402618 https://www.cnblogs.com/nice0e3/p/13746076.html

GO-template: https://colobu.com/2016/10/09/Go-embedded-template-best-practices/ https://colobu.com/2019/11/05/Golang-Templates-Cheatsheet/

yaml: https://www.mi1k7ea.com/2019/11/29/Java-SnakeYaml%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E/

hissec's Projects

burpy

A plugin that allows you execute python and get return to BurpSuite.

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

chromerce

2021年4月15日出现的Chrome payload

confidence2019_teaser_lottery

'The Lottery' challenge at 'Teaser CONFidence CTF 2019'.

cve-2021-3156

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

cve-2021-40449-exploit

windows 10 14393 LPE

cve-2022-0847

CVE-2022-0847

cve-2022-0848

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”

cve-2022-30190-follina-office-msdt-fixed

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

dll_inject_vs_binaries

LOLBINs that inject a DLL into a given process ID.

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

exp-hub

漏洞复现、批量脚本

flask-session-cookie-manager

:cookie: Flask Session Cookie Decoder/Encoder

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

getchromepassword

The way to get your password which has restored in your localhost by chrome.

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.