Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Dec 5, 2021

• add jsForward：针对前端加解密实行数据的修改与重放解决方案

  Mr-xn

  committed
  0bbb8e9

  Copy full SHA for 0bbb8e9

Commits on Dec 2, 2021

• add VMware_vCenter：VMware vCenter版本小于7.0.2.00100的未授权任意文件读取+SSRF+XSS

  Mr-xn

  committed
  bc80601

  Copy full SHA for bc80601

• add SharpMemshell:.net写的内存 shell

  Mr-xn

  committed
  4c08e1e

  Copy full SHA for 4c08e1e

• add SpringMemShell：Spring内存马检测和隐形马研究

  Mr-xn

  committed
  0d23f15

  Copy full SHA for 0d23f15

Commits on Dec 1, 2021

• add fuso：扶桑一款RUST 编写的快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具

  Mr-xn

  committed
  b5e2f29

  Copy full SHA for b5e2f29

Commits on Nov 30, 2021

• add LinuxFlaw：Linux 平台的漏洞 PoC、Writeup 收集

  Mr-xn

  committed
  56a9d7c

  Copy full SHA for 56a9d7c

Commits on Nov 29, 2021

• add Caesar：全新的敏感文件发现工具

  Mr-xn

  committed
  e3862b8

  Copy full SHA for e3862b8

Commits on Nov 27, 2021

• add CVE-2021-41653：TP-Link TL-WR840N V5(EU) - RCE

  Mr-xn

  committed
  552dd5a

  Copy full SHA for 552dd5a

Commits on Nov 26, 2021

• add SimpleRemoter：基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、桌面管理、文件管理、语音管理、视频管理、服务管理、注册表管理等功能

  Mr-xn

  committed
  7d2187e

  Copy full SHA for 7d2187e

• add BlueShell：一个Go语言编写的持续远控工具，拿下靶机后，根据操作系统版本下载部署对应的bsClient，其会每隔固定时间向指定的C&C地址发起反弹连接尝试，在C&C端运行bsServer即可连接bsClient，从而实现对靶机的持续控制

  Mr-xn

  committed
  7c53e26

  Copy full SHA for 7c53e26

Commits on Nov 24, 2021

• add 鱼跃CMS审计-后台多处文件上传

  Mr-xn

  committed
  97fb251

  Copy full SHA for 97fb251

• add webshell-bypassed-human：过人 webshell 的生成工具

  Mr-xn

  committed
  400eb4c

  Copy full SHA for 400eb4c

Commits on Nov 23, 2021

• add CVE-2021-36260：海康威视命令注入漏洞

  Mr-xn

  committed
  3655144

  Copy full SHA for 3655144

• add CVE-2020-0787 简单回显+适用于 CS 的 CNA 文件

  Mr-xn

  committed
  044aca5

  Copy full SHA for 044aca5

• add CVE-2021-42321:微软Exchange Server远程代码执行漏洞(需要省份验证)

  Mr-xn

  committed
  91e0e30

  Copy full SHA for 91e0e30

• add InstallerFileTakeOver：Windows Installer 本地提权漏洞PoC

  Mr-xn

  committed
  a206ba6

  Copy full SHA for a206ba6

Commits on Nov 22, 2021

• add MySQL_Fake_Server&java反序列化利用框架:ysomap

  Mr-xn

  committed
  48cba92

  Copy full SHA for 48cba92

• add Fvuln：漏洞批量扫描集合工具(闭源)

  Mr-xn

  committed
  f1478ee

  Copy full SHA for f1478ee

• add Sec-Tools：一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能

  Mr-xn

  committed
  b76d54b

  Copy full SHA for b76d54b

• add cool：Golang Gin 框架写的免杀平台

  Mr-xn

  committed
  ed0a385

  Copy full SHA for ed0a385

• add Hadoop Yarn RPC未授权RCE&CVE-2021-41277：Metabase 敏感信息泄露&CVE-2021-37580：Apache ShenYu权限认证绕过&Alibaba Sentinel 前台 SSRF

  Mr-xn

  committed
  ecedd21

  Copy full SHA for ecedd21

Commits on Nov 21, 2021

• update readme

  Mr-xn

  committed
  da5e931

  Copy full SHA for da5e931

• add DNS Over HTTPS for Cobalt Strike(将 DoH 与 Cobalt Strike 结合使用, 无需第三方帐户或基础设施设置, 使用有效的 SSL 证书加密流量, 并将流量发送到信誉良好的域名)

  Mr-xn

  committed
  62122d0

  Copy full SHA for 62122d0

• add 一篇文章带你入门Oracle注入

  Mr-xn

  committed
  8aa729f

  Copy full SHA for 8aa729f

• add JBoss中间件漏洞总结

  Mr-xn

  committed
  80be260

  Copy full SHA for 80be260

• add CobaltStrike4.X之去除CheckSum8特征

  Mr-xn

  committed
  00c6e6d

  Copy full SHA for 00c6e6d

Commits on Nov 17, 2021

• add Jira-Lens：一款专门扫描 jira 漏洞的工具

  Mr-xn

  committed
  760b817

  Copy full SHA for 760b817

Commits on Nov 14, 2021

• add awvs13_batch_py3：针对 AWVS扫描器开发的批量扫描脚本，支持联动xray、burp、w13scan等被动批量

  Mr-xn

  committed
  3e24aaf

  Copy full SHA for 3e24aaf

• add Web-Attack-Cheat-Sheet：web 攻击清单

  Mr-xn

  committed
  3a4c26f

  Copy full SHA for 3a4c26f

Commits on Nov 13, 2021

• add 记一次授权测试到顺手挖一个0day(pBootCMS)

  Mr-xn

  committed
  691773f

  Copy full SHA for 691773f

Commits on Nov 12, 2021

• add PbootCMS 3.04系列漏洞挖掘过程

  Mr-xn

  committed
  f055998

  Copy full SHA for f055998

Commits on Nov 11, 2021

• add Telegram下的C2创建过程

  Mr-xn

  committed
  32bd48f

  Copy full SHA for 32bd48f

Commits on Nov 10, 2021

• add rs_shellcode：rust 语言编写的 shellcode 加载器

  Mr-xn

  committed
  9dc28ec

  Copy full SHA for 9dc28ec

• add natpass：新一代NAT内网穿透+shell+vnc工具

  Mr-xn

  committed
  c9c9439

  Copy full SHA for c9c9439

• add host 碰撞工具

  Mr-xn

  committed
  ce8cf8a

  Copy full SHA for ce8cf8a

Pagination

Previous

Next