Skip to content

用于漏洞排查的pocsuite验证POC代码

Notifications You must be signed in to change notification settings

HDfirewall/some_pocsuite

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

some_pocsuite

本项目是用于企业内部进行漏洞排查与验证的的pocsuite验证POC代码(Pocsuite是知道创宇安全团队的开源漏洞测试框架);参考了网上的开源代码并进行了修改。

插件代码编写

使用Pocsuite 漏洞测试框架,插件编写请参考 Pocsuite 项目插件编写要求;陆续扩充中...

PoC 编写规范及要求说明

序号 poc 说明
1 hikvision-2013-4976_web_login-bypass.py 海康威视cve-2013-4976匿名登录验证绕过
2 weblogic-vul-check_all_rce.py weblogic反序列化漏洞(CVE-2016-0638,CVE-2016-3510,CVE-2017-3248,CVE-2018-2628,CVE-2018-2893)
3 weblogic-wls-2017-10271_all_rce.py weblogic WLS组件反序列化漏洞CVE-2017-10271
4 zookeeper_all_unauthorized.py zookeeper未授权访问
5 redis_all_unauthorized.py redis未授权访问( pocsuite_poc_collect
6 memcached_all_unauthorized.py memchached未授权访问
7 snmp_v2_unauthorized.py snmp未授权访问(需要安装pysnmp模块)
8 iis-ms15-034_7_rce.py IIS(CVE-2015-1635,MS15-034)Check Script
9 iis-shortname_6_disclosure.py IIS Tilde Vulnerability (IIS Shortname) Check
10 rdp-ms12-020_all_rce.py MS12-020/CVE-2012-0002 Vulnerability Tester
11 windows-ms14-066_all_rce.py winshock (MS14-066) Vulnerability Tester
12 weblogic-async-2019-2725_all_rce.py weblogic async反序列化(CVE-2019-2725)Vulnerability Tester (POP: jdk7u21)
13 rdp-2019-0708_all_rce.py windows RDP RCE Vulnerability(CVE-2019-0708)Check (by robertdavidgraham/rdpscan)
14 weblogic-ssrf_all_ssrf.py WebLogic SSRF And XSS(CVE-2014-4241, CVE-2014-4210, CVE-2014-4242) check POC

参考及依赖项目

About

用于漏洞排查的pocsuite验证POC代码

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%