GitHub监控消息提醒！！！

更新了：漏洞利用
描述：漏洞利用、抓包、扫描器等工具
URL：https://github.com/xcsykb/Tools

标签：#漏洞利用

GitHub

GitHub - xcsykb/Tools: 漏洞利用工具

漏洞利用工具. Contribute to xcsykb/Tools development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：RHSB-2022-002 Dirty Pipe - kernel arbitrary file manipulation - (CVE-2022-0847)
URL：https://github.com/mhanief/dirtypipe

标签：#CVE-2022

GitHub

GitHub - mhanief/dirtypipe: Dirty Pipe Vulnerability Detection Script - RHSB-2022-002 Dirty Pipe - kernel arbitrary file manipulation…

Dirty Pipe Vulnerability Detection Script - RHSB-2022-002 Dirty Pipe - kernel arbitrary file manipulation - (CVE-2022-0847) - mhanief/dirtypipe

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Hacked up Dirty Pipe (CVE-2022-0847) PoC that hijacks a SUID binary to spawn a root shell. (and attempts to restore the damaged binary as well)
URL：https://github.com/LudovicPatho/CVE-2022-22965_Spring4Shell

标签：#CVE-2022

GitHub

GitHub - LudovicPatho/CVE-2022-22965_Spring4Shell: A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable…

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a W...

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-22963 research
URL：https://github.com/SealPaPaPa/SpringCloudFunction-Research

标签：#CVE-2022

GitHub

GitHub - SealPaPaPa/SpringCloudFunction-Research: CVE-2022-22963 research

CVE-2022-22963 research. Contribute to SealPaPaPa/SpringCloudFunction-Research development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Team Server (RTS)
URL：https://github.com/redhat-cop/automation-good-practices

标签：#Red Team

GitHub

GitHub - redhat-cop/automation-good-practices: Recommended practices for all elements of automation using Ansible, starting with…

Recommended practices for all elements of automation using Ansible, starting with collections and roles, continuing with playbooks, inventories and plug-ins... These good practices are planned to b...

GitHub监控消息提醒！！！

更新了：sql注入
描述：记录实战中的各种sql注入绕过姿势
URL：https://github.com/Junehck/SQL-injection-bypass

标签：#sql注入

GitHub

GitHub - Junehck/SQL-injection-bypass: 记录实战中的各种sql注入绕过姿势

记录实战中的各种sql注入绕过姿势. Contribute to Junehck/SQL-injection-bypass development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：反序列化
描述：复现Java反序列化漏洞
URL：https://github.com/wudipangpapa/CCShiro-CBShiro-CB

标签：#反序列化

GitHub

GitHub - h0cksr/CCShiro-CBShiro-CB: 复现Java反序列化漏洞

复现Java反序列化漏洞. Contribute to h0cksr/CCShiro-CBShiro-CB development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Team Infrastructure Builder
URL：https://github.com/andrejtomci/RTIB

标签：#Red Team

GitHub

GitHub - andrejtomci/RTIB: Red Team Infrastructure Builder

Red Team Infrastructure Builder. Contribute to andrejtomci/RTIB development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：反序列化
描述：复现Java反序列化漏洞
URL：https://github.com/wudipangpapa/Java

标签：#反序列化

GitHub

GitHub - h0cksr/CCShiro-CBShiro-CB: 复现Java反序列化漏洞

复现Java反序列化漏洞. Contribute to h0cksr/CCShiro-CBShiro-CB development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-22947 reproduce
URL：https://github.com/aesm1p/CVE-2022-22947-POC-Reproduce

标签：#CVE-2022

GitHub

GitHub - aesm1p/CVE-2022-22947-POC-Reproduce: CVE-2022-22947 reproduce

CVE-2022-22947 reproduce. Contribute to aesm1p/CVE-2022-22947-POC-Reproduce development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：Red Team
描述：Red Team Service Center Blazor
URL：https://github.com/StergiosVogiatzis/Session-24

标签：#Red Team

GitHub

GitHub - StergiosVogiatzis/Session-24: Red Team Service Center Blazor

Red Team Service Center Blazor. Contribute to StergiosVogiatzis/Session-24 development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965.
URL：https://github.com/Snip3R69/spring-shell-vuln

标签：#CVE-2022

GitHub

GitHub - Snip3R69/spring-shell-vuln: Spring has Confirmed the RCE in Spring Framework. The team has just published the statement…

Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965....

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-25636 exploit rewritten with pipe primitive
URL：https://github.com/veritas501/CVE-2022-25636-PipeVersion

标签：#CVE-2022

GitHub

GitHub - veritas501/CVE-2022-25636-PipeVersion: CVE-2022-25636 exploit rewritten with pipe primitive

CVE-2022-25636 exploit rewritten with pipe primitive - veritas501/CVE-2022-25636-PipeVersion

GitHub监控消息提醒！！！

更新了：webshell
描述：Common typescript libraries used across webshell clients
URL：https://github.com/bastionzero/webshell-common-ts

标签：#webshell

GitHub

GitHub - bastionzero/webshell-common-ts: Common typescript libraries used across webshell clients

Common typescript libraries used across webshell clients - GitHub - bastionzero/webshell-common-ts: Common typescript libraries used across webshell clients

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：CVE-2022-0185 exploit rewritten with pipe primitive
URL：https://github.com/veritas501/CVE-2022-0185-PipeVersion

标签：#CVE-2022

GitHub

GitHub - veritas501/CVE-2022-0185-PipeVersion: CVE-2022-0185 exploit rewritten with pipe primitive

CVE-2022-0185 exploit rewritten with pipe primitive - veritas501/CVE-2022-0185-PipeVersion

GitHub监控消息提醒！！！

更新了：绕过
描述：TrickyRule——针对Google FCM域名及IP、部分国外顶级域名优化，并且尝试绕过一些网站的代理工具检测。
URL：https://github.com/ChengzhiLiu/TrickyRule

标签：#绕过

GitHub

GitHub - ChengzhiLiu/TrickyRule: TrickyRule——针对Google FCM域名及IP、部分国外顶级域名优化，并且尝试绕过一些网站的代理工具检测。

TrickyRule——针对Google FCM域名及IP、部分国外顶级域名优化，并且尝试绕过一些网站的代理工具检测。 - ChengzhiLiu/TrickyRule

GitHub监控消息提醒！！！

更新了：渗透测试
描述：渗透测试框架
URL：https://github.com/doimet/Polaris

标签：#渗透测试

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Exploitation of CVE-2022-22639
URL：https://github.com/jhftss/CVE-2022-22639

标签：#CVE-2022

GitHub

GitHub - jhftss/CVE-2022-22639: CVE-2022-22639: Get a Root Shell on macOS Monterey

CVE-2022-22639: Get a Root Shell on macOS Monterey - jhftss/CVE-2022-22639

GitHub监控消息提醒！！！

更新了：Red Team
描述：Certified Red Team Operator
URL：https://github.com/h3ll0clar1c3/CRTO

标签：#Red Team

GitHub

GitHub - h3ll0clar1c3/CRTO: Certified Red Team Operator

Certified Red Team Operator. Contribute to h3ll0clar1c3/CRTO development by creating an account on GitHub.

GitHub监控消息提醒！！！

更新了：CVE-2022
描述：Vulnerability scanner for Spring4Shell (CVE-2022-22965)
URL：https://github.com/fracturelabs/go-scan-spring

标签：#CVE-2022

GitHub

GitHub - fracturelabs/go-scan-spring: Vulnerability scanner for Spring4Shell (CVE-2022-22965)

Vulnerability scanner for Spring4Shell (CVE-2022-22965) - fracturelabs/go-scan-spring