caizhuang Goto Github PK

apache-solr-rce

Apache Solr Exploits 🌟

confluencepoc

cve-2019-2725

weblogic绕过和wls远程执行

cve-2019-3396

Confluence Widget Connector RCE

dbeaver

Free universal database tool and SQL client

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

fastjson

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

golangunhooker

EDR绕过，由GoLang编写

learngit

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

nps-fz

基于原版的优化版本

offensiveinterview

翻译国外的@WebBreacher的安全/渗透测试/红队面试题，有部分参考作用

pentest_interview

个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~

poc

Some poc

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

syswhispers3winhttp

SysWhispers3WinHttp 基于SysWhispers3增添WinHttp分离加载，可免杀360核晶与Defender等杀软。

webshell

This is a webshell open source project

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档