hissec's Projects
Apache Log4j 远程代码执行
Windows 权限提升 BadPotato
JMX enumeration and attacking tool.
A plugin that allows you execute python and get return to BurpSuite.
CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.
2021年4月15日出现的Chrome payload
'The Lottery' challenge at 'Teaser CONFidence CTF 2019'.
PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)
windows 10 14393 LPE
CVE-2022-0847
CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞,可覆盖重写任意可读文件中的数据,从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞(Dirty Cow),但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”
CVE-2022-30190-follina.py-修改版,可以自定义word模板,方便实战中钓鱼使用。
LOLBINs that inject a DLL into a given process ID.
DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。
漏洞复现、批量脚本
:cookie: Flask Session Cookie Decoder/Encoder
POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes
The way to get your password which has restored in your localhost by chrome.
A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
VNC client and server library for Go.
GoScan是采用Golang语言编写的一款分布式综合资产管理系统,适合红队、SRC等使用
heapdump敏感信息查询工具,例如查找 spring heapdump中的密码明文,AK,SK等
封装一些库文件
内网渗透工具、支持sock等代理模式和端口转发模式
注入JVM进程 动态获取目标进程连接的数据库
一款支持高度自定义的 Java 内存马生成工具
JNDI 注入利用工具
解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)