sammylu Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

anonymoussmbserver

一个能快速开启和关闭匿名SMB共享的红队脚本

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

arlplus

扫描器灯塔魔改

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

code-audit

cve-2019-2725

CVE-2019-2725命令回显+webshell上传+最新绕过

cve-2019-3396_exp

CVE-2019-3396 confluence SSTI RCE

cve-2020-11890

CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE

dirtycow

Dirty Cow exploit - CVE-2016-5195

example-custom-editor-tab

fingerprint

各种工具指纹收集分享

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

jspspy.jsp

Jsp木马远程控制脚本（大马）

log4j_masscan_validator

log4j basic vulnrablity scanner for determining if log4j vulnrablity exists within an IP set collected via masscan, obviously this is not to be used for malicious or illegal purposes, only for scanning your own subnets or those you have permison to scan

ms17-010

MS17-010

myfuzz

从总多目录字典中合并提取的高效目录爆破字典

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

pcaket_catcher

pocsuite-poc

用pocsuite写的一些poc

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

powercat

netshell features all in version 2 powershell

powershellforpentesters

Course repository for PowerShell for Pentesters Course

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pppxray

Xray批量化自动扫描

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

qiuzhiquan