freefv Goto Github PK

cnvd-2021-49104-fanwei-eoffice-fileupload

泛微eoffice最新文件上传漏洞POC，基于2个接口自动检测

cobalt_strike_extension_kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.

cobaltstrike

CobaltStrike's source code

codetest

CodeTest信息收集和漏洞利用工具，可在进行渗透测试之时方便利用相关信息收集脚本进行信息的获取和验证工作，漏洞利用模块可选择需要测试的漏洞模块，或者选择所有模块测试，包含CVE-2020-14882, CVE-2020-2555等，可自己收集脚本后按照模板进行修改。

coremailuploadrce

Coremail任意文件上传漏洞POC

csplugins

Cobaltstrike Plugins

cve-2017-0199-master

CVE-2017-0199

cve-2017-11610

Supervisord远程命令执行漏洞脚本

cve-2018-1335-exp-gui

GUI版 EXP

cve-2018-14847

MikroTik RouterOS Winbox未经身份验证的任意文件读/写漏洞

cve-2018-2893

可以直接反弹shell

cve-2019-0230

CVE-2019-0230 Exploit

cve-2019-0231

CVE-2019-0230 & s2-059 poc.

cve-2019-12409

Apache Solr RCE (ENABLE_REMOTE_JMX_OPTS="true")

cve-2019-2618

Weblogic Upload Vuln(Need username password)-CVE-2019-2618

cve-2019-2888

WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)

cve-2020

2020一些漏洞

cve-2020-10148-solarwinds-orion

cve-2020-10977

GitLab 12.9.0 Arbitrary File Read

cve-2020-11579

Exploit code for CVE-2020-11579, an arbitrary file disclosure through the MySQL client in PHPKB

cve-2020-1350

PoC Checking script

cve-2020-13942

cve-2020-1472

Test tool for CVE-2020-1472

cve-2020-14882

CVE-2020-14882 Weblogic-Exp

cve-2020-14882_all

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

cve-2020-14883

CVE-2020-14882 GET POC

cve-2020-14884

CVE-2020–14882 by Jang

cve-2020-14885

CVE-2020-14882批量验证工具。

cve-2020-1611

Juniper Junos Space (CVE-2020-1611) (PoC)

cve-2020-16898

Proof-of-Concept (PoC) script to exploit IPv6 (CVE-2020-16898).