l3m0nade Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

alphagolang

IDApython Scripts for Analyzing Golang Binaries

angr-flask

awd_framework

近乎无解的AWD框架

coldcore

A CTF platform used in IceCTF 2016

ctf_questions

cve-2021-24086

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

cve-2021-34730

Cisco RV110w UPnP stack overflow

cve-2021-36260

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

cve-2022-20699

Cisco Anyconnect VPN unauth RCE (rwx stack)

firmafl

FIRM-AFL is the first high-throughput greybox fuzzer for IoT firmware.

funnymeterpreter

与反病毒软件老大哥们的打闹日常

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

iotvul

store vulns

l3m0nade

l3m0nade.github.io

This is a Github Pages test

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, ThreatCrowd, Valhalla, Malware Bazaar, ThreatFox, Triage and it is able to scan Android devices against VT and HA.

myangrplayground

测试一些angr，idapython,代码

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

prepare-for-awd

AWD攻防赛脚本集合

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

vulbase

各大漏洞文库合集

weblogger

针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具