s41n1k Goto Github PK

cve-2022-22536

SAP memory pipes(MPI) desynchronization vulnerability CVE-2022-22536.

cve-2022-22972

cve-2022-23808

phpMyAdmin XSS

cve-2022-26133

Atlassian Bitbucket Data Center反序列化漏洞(CVE-2022-26133)批量验证和利用脚本

cve-2022-27925

Zimbara unauthenticated RCE

cve-2022-29464

WSO2 RCE (CVE-2022-29464) exploit.

cve-2022-30778

Case for CVE-2022-30778 [laravel 5x]

cve-reverse

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

domain-extractor

Extract valid or partially valid domain names and IPs from malicious or invalid URLs.

dompdf-rce

RCE exploit for dompdf

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

eventlistener-xss-recon

expbox

Vulnerability Exploitation Code Collection Repository

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

exploit

exploit-archive

exploits

Containing Self Made Perl Reproducers / PoC Codes

fav-up

IP lookup by favicon using Shodan

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

ffuf-mass

findbb

Check if domain has bug bounty program or not

forbidden

Bypass 4xx HTTP response status codes. Based on PycURL.

fuzz_dic

参数 | 字典 collections

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gf-patterns-collection

GF patterns

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

googd0rker

Note: Going through a full re-write of the tooling so the current versions in the repo do not work!

hackingtool

ALL IN ONE Hacking Tool For Hackers