feniczy Goto Github PK

advisories

ctf_web

a project aim to collect CTF web practices .

cve-2017-11882

Proof-of-Concept exploits for CVE-2017-11882

cve-2019-0708-poc-hitting-path

It's only hitting vulnerable path in termdd.sys!!! NOT DOS

exserial

Java Untrusted Deserialization Exploits Tools

hqlmap

(Deprecated) HQLmap, Automatic tool to exploit HQL injections

jafer

Modified version of JAFER ToolKit Project (http://www.jafer.org/)

kernel-exploits

A bunch of proof-of-concept exploits for the Linux kernel

ms15-034

POC MS15-034

ms17-010

MS17-010

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shootback

a reverse TCP tunnel let you access target behind NAT or firewall

subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

subdomainsbrute

A simple and fast sub domain brute tool for pentesters

svn_git_scanner

用于扫描git，svn泄露

svnexploit

SvnExploit支持SVN源代码泄露全版本Dump源码

tagattrdb

XSS Tags & Attributes DB

termite

Tool for tunnel (Version 2)

thinkcmf

ThinkCMF5 is a content manage framework ,based on ThinkPHP5

weblogic_unserialize_exploit

java unserialize vul for weblogic exploit

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell