werwolfz Goto Github PK

permeable

渗透资料

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

phpggc

a php serialize/unseralize tools fork from ambionics/phpggc, add chinese common php framework

phuip-fpizdam

Exploit for CVE-2019-11043

pie-stack-clash-cve-2017-1000253

Demo-ing CVE-2017-1000253 in a container

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

poc-2020-8558

Information about Kubernetes CVE-2020-8558, including proof of concept exploit.

poc-cve-2022-26809

PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.

poc-exploit

PoC or Exp Of Vulnerability

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

pocs

poc

pocscan

polkit-exploit

Privilege escalation with polkit - CVE-2021-3560

poorscanner

一款不需要买代理来减少扫网站目录被封概率的扫描器，适用于中小规格字典。

powertools

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

proxylogscan

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855).

pystinger

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

quarkspwdump

Dump various types of Windows credentials without injecting in any process.

r0capture

安卓应用层抓包通杀脚本

rabr

Redis-Attack By Replication (通过主从复制攻击Redis)

rattler

Automated DLL Enumerator

rau_crypto

Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

redteam

信息收集

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

redteamnotes

红队笔记

relayx

NTLM relay test.

remote-method-guesser

Java RMI Vulnerability Scanner

resources

安卓APP安全测试所列资源

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.