bigbigx Goto Github PK

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

common-regex

:jack_o_lantern: 常用正则表达式 - 收集一些在平时项目开发中经常用到的正则表达式。

cookie-pool

一个强大的Cookie池项目，超乎你的想象

coolplayspark

酷玩 Spark: Spark 源代码解析、Spark 类库等

cpu-spectre-meltdown

CPU-spectre-meltdown

crack-geetest

滑动验证码破解示例，仅供学习使用。

crack_gs

全国工商企业信息查询 验证码破解 滑动验证码破解示例

crackmapexec

A swiss army knife for pentesting networks

crawl

使用crawlspider获取url

crawler

基于node.js做的一个网络爬虫

crawler-1

python 爬虫从入门到复杂html解析，采集网站，采集互联网，操作mysql存储数据

crawler-python

a simple crawler framework

crawlergo

A powerful dynamic crawler for web vulnerability scanners

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

csbruter

Cobalt Strike team server password brute force tool

ctf-wiki

CTF Wiki Online

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2017-10271

cve-2017-10272

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.

cve-2017-12149

CVE-2017-12149 JBOSS as 6.X反序列化(反弹shell版)

cve-2017-12542

Test and exploit for CVE-2017-12542

cve-2017-8570

CVE-2017-8570生成脚本(CVE-2017-0199另一种利用方式)

cve-2017-8571

Proof of Concept exploit for CVE-2017-8570

cve-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2017-8760

CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

cve-2018-2380

PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM

cve-2018-2628

CVE-2018-2628

cve-2018-2628-multithreading

WebLogic WLS核心组件反序列化漏洞多线程批量检测脚本 CVE-2018-2628-MultiThreading

cve-2018-2629

CVE-2018-2628