purewatersun Goto Github PK

themes

Common Themes

tomcat-jmxproxy-rce-exp

Apache Tomcat JMXProxy RCE

tomcatscan

Tomcat漏洞批量检测工具

tongdaoa_poc

详见公众号

ttt

uac-bypass-exploit

Should work from Windows 7 to Latest Windows 10 FCU

vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

veinmind-tools

villain

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy for working as a team.

vlanpwn

VLAN attacks toolkit

vmware-cve-2022-22954

POC for VMWARE CVE-2022-22954

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulndb

漏洞研究☞Dockerfile备份

vulnerability-wiki

一个综合漏洞知识库，集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库

vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

weblogicexploit-gui

Weblogic漏洞利用图形化工具 支持注入内存马、一键上传webshell、命令执行

weblogictool

WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）

webmin-cve

a Curated list of Webmin vulnerability for penetration tester

windows-red-team-cheat-sheet

Windows for Red Teamers

wlogger

wLogger 是一款集合 日志采集,日志解析持久化存储，web流量实时监控 。三位一体的web服务流量监控应用。 三大功能模块均可独立部署启用互不干扰。目前已内置 nginx 和 apache 的日志解析存储器，简单配置一下，开箱即用。

wmctf-2023

wps-0day-20230809

WPS-Office 1-Click RCE exp 202308091824

wsmemshell

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

xwaf

Automatic bypass (brute force) waf

xxqg_tiku

强国题库服务器，部署后可进行题库的增删改查，配合autojs刷题库可建设自己的题库服务器

yaml-payload

A tiny project for generating SnakeYAML deserialization payloads

yasso

强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）

yongyou_nc_cloud_upload_rce

用友NC Cloud前台远程命令执行漏洞批量扫描poc、exp，带命令执行回显

yongyounc-unserialize-tools

用友NC反序列化漏洞payload生成

ystupload

亿赛通电子文档安全管理系统-/UploadFileFromClientServiceForClient 任意文件上传漏洞