lwzxs Goto Github PK

-scan2-

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2019_vul_warning_poc_collect

整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善

2022-vul-poc

2022年爆出的漏洞信息以及poc和exp

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

acmsdiscovery

CMS识别，CMS检测，多线程，超大指纹库。CMS identification, CMS detection, multi-threading, large fingerprint library.

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

android_kernel_xiaomi_msm8956

angelsword

Python3编写的CMS漏洞检测框架

antsword

AntSword is a cross-platform website management toolkit.

asynchttpsdns

DNS Over Https Powered By Asyncio

autofuck

自动识别cms并且加载相关poc自动攻击。

autosploit_chs

渗透工具AutoSploit的汉化版

avlist

avList - 杀软进程对应杀软名称

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

behinder

“冰蝎”动态二进制加密网站管理客户端

bitb

Browser In The Browser (BITB) Templates

centos-control-web-panel-cve

CentOS Control Web Panel, Root Privilege Escalation

cmsidentification-masterv2

CMS指纹识别

cobaltstrike4.3

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

coremail-poc

ctfdefense

Some tools for CTF off line

cve-2017-7269

fixed msf module for cve-2017-7269

cve-2017-7269-exploit

exec 8 bytes command

cve-2018-2628

CVE-2018-2628漏洞工具包

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2019-1003000-jenkins-rce-poc

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

cve-2019-11510-poc

Pulse Secure SSL VPN pre-auth file reading