yogistudio Goto Github PK

cve-2018-2893

可以直接反弹shell

cve-2018-3191

CVE-2018-3191 反弹shell

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2019-0708-poc

Working proof of concept for CVE-2019-0708, spawns remote shell.

cve-2019-1388

CVE-2019-1388 UAC提权 (nt authority\system)

cve-2019-16278

Directory transversal to remote code execution

cve-2019-6340

Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340

cve-2020-0601

PoC for CVE-2020-0601

cve-2020-0668

Use CVE-2020-0668 to perform an arbitrary privileged file move operation.

cve-2020-0796

CVE-2020-0796 - a wormable SMBv3 vulnerability. How to work.

cve-2020-0796-poc

PoC for triggering buffer overflow via CVE-2020-0796

cve-2020-0797

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-11651-poc

PoC exploit of CVE-2020-11651 and CVE-2020-11652

cve-2020-1947

Apache ShardingSphere UI YAML解析远程代码执行漏洞

cve-2020-2551

CVE-2020-2551 poc exploit python Weblogic RCE with IIOP, power by 【劦久信安】 online check:

cve-2020-7961-poc

cve_2019_0708_bluekeep_rce

bluekeep exploit

de1ctf-mc_challs

de1ctf 2020 mc challs - mc系列题目

de1ctf2019

decrypt_weblogic_password

搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。

dedecmscan

织梦全版本漏洞扫描

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dirtycow

djangohunter

Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dorabox

DoraBox - 基础Web漏洞训练靶场

ds_store_exp

A .DS_Store file disclosure exploit. It parse .DS_Store file and download files recursively.

dsxs

Damn Small XSS Scanner

dubbo-exp

Dubbo反序列化一键快速攻击测试工具，支持dubbo协议和http协议，支持hessian反序列化和java原生反序列化。

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...