ajdecade Goto Github PK

agentcrack

不那么一样的 Java Agent 内存马

alpine-nginx-php8

async-proxy-pool

🔅 Python3 异步爬虫代理池

awd-platform

platform for awd

awd_framework

近乎无解的AWD框架

awd_worm_phpwebshell_framework

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

blog

brute-selenium

通过selenium实现Web登陆界面爆破

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

chatgpt-next-web

One-Click to deploy well-designed ChatGPT web UI on Vercel. 一键拥有你自己的 ChatGPT 网页服务。

cms-hunter

CMS漏洞测试用例集合

cmspoc

CMS渗透测试框架-A CMS Exploit Framework

cortana-scripts

A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.

curlshell

reverse shell using curl

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2021-22205

CVE-2021-22205 Unauthorized RCE

cve-2023-30547

PoC Exploit for VM2 Sandbox Escape Vulnerability

cve-2023-35001

Pwn2Own Vancouver 2023 Ubuntu LPE exploit

cve-2023-4357-chrome-xxe

全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.

cve-2023-4911

PoC for CVE-2023-4911

cve-jiankong

CVE监控

dalfox

🌙🦊 DalFox is an powerful open source XSS scanning tool and parameter analyzer, utility

decrypt_weblogic_password

搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。

dirtycow.github.io

Dirty COW

exploits

fenjing

一个类似SQLMap的Jinja2 SSTI利用脚本 | A SQLMap-like Jinja2 SSTI cracker

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gel4y-mini-shell-backdoor-decode

Gel4y-Mini-Shell-Backdoor-Decode