jaky5155 Goto Github PK

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

cobaltstrikedos

CVE-2021-36798 Exp: Cobalt Strike < 4.4 Dos

codetest

脚本工具合集GUI版本，内置漏洞验证、利用模块，可自定义脚本实现批量验证。

commix

Automated All-in-One OS Command Injection Exploitation Tool.

conptyshell

ConPtyShell - Fully Interactive Reverse Shell for Windows

coremail-poc-exp

crossc2

generate CobaltStrike's cross-platform payload

csonvps

CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计

cve-2019-0708

CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7

cve-2019-0708-exp

cve-2019-0785

CVE-2019-0785

cve-2019-17564

CVE-2019-17564 Apache Dubbo deserialization RCE

cve-2020-0683

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

cve-2021-23132

com_media allowed paths that are not intended for image uploads to RCE

cve-2021-38647

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

cve-2021-40444

CVE-2021-40444 PoC

cve-2022-21907

Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

cve-2022-24990-terramaster-tos--php-

CVE-2022-24990：TerraMaster TOS 通过 PHP 对象实例化执行未经身份验证的远程命令

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

cve-2022-29464

WSO2 RCE (CVE-2022-29464) exploit.

cve-exploits

PoCs for public CVE's I have been working on.

darkangel

DarkAngel 是一款全自动白帽漏洞扫描器，从hackerone、bugcrowd资产监听到漏洞报告生成、企业微信通知。

defender-control

An open-source windows defender manager. Now you can disable windows defender permanently.

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

dumpall

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

dumphash

一款dump hash工具配合后渗透的利用

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

erebus

CobaltStrike后渗透测试插件

estk

ES ToolKit is a standalone solution to navigate and backup data for a wide range of Elasticsearch and Kibana versions.