nolan124 Goto Github PK

jndi-inject-exploit

解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入

jndiexploit

A malicious LDAP server for JNDI injection attacks

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

kernel-exploits

Various kernel exploits

msbuild

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

nolan124

Config files for my GitHub profile.

onelistforall

Rockyou for web fuzzing

peloader

Load PE via XML Attribute

pocassist

全新的开源漏洞测试框架，实现poc在线编辑、运行、批量测试。使用文档：

proxyshell

ProxyShell POC Exploit : Exchange Server RCE (ACL Bypass + EoP + Arbitrary File Write)

rattler

Automated DLL Enumerator

rbcd-attack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

rebeyond-mode

修改版rebeyond

requesttemplate

双语双端内网扫描以及验证工具

rwal-scan

Rich woman scanner --富婆扫描器

s2-062

远程代码执行S2-062 CVE-2021-31805验证POC

sharpproxylogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

shellcodeframework

绕3环的shellcode免杀框架

siofra

siofra-1

DLL hijacking and PE infection tool

spoolfool

Exploit for CVE-2022–22718 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

syswhispers2

AV/EDR evasion via direct system calls.

taskschedulermisc

Misc TaskScheduler Plays

uacme

Defeating Windows User Account Control

urldns

vhost_password_decrypt

vhost password decrypt

viper

Redteam operation platform with webui 图形化红队行动辅助平台