yuanqi-che Goto Github PK

metasploit-framework

Metasploit Framework

micro8

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得

nuclei_poc

Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现（已有11wPOC）

oa-tongda-rce

Office Anywhere网络智能办公系统

passworddic

2011-2019年Top100弱口令密码字典 Top1000密码字典 服务器SSH/VPS密码字典 后台管理密码字典 数据库密码字典

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest_tools

收集一些小型实用的工具

pligg

Remote command execution (Authenticated RCE)

pochouse

POC&EXP仓库、hvv弹药库、Nday、1day

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE

powertools

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

pystinger

bypass firewall by webshell 一款使用webshell进行流量转发的出网工具

redtool

日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种

rustscan

🤖 The Modern Port Scanner 🤖

scripts

京东薅羊毛工具, 京东水果、宠物、种豆等等

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sensinfor

A chrome extension use to find leak file and backup file.

shiro_rce

shiro rce 反序列 命令执行 一键工具

shiroexploit

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

shiroscan

Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)

smbghost

Scanner for CVE-2020-0796 - SMBv3 RCE

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

teemo

A Domain Name & Email Address Collection Tool

thinkphp-rce-poc-collection

thinkphp v5.x 远程代码执行漏洞-POC集合

thinkphpgui

Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。

verifyemail

Python在线验证邮箱真实性，支持批量验证