Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Nov 15, 2022

• add FirmAE：物联网设备固件模拟分析

  Mr-xn

  committed
  b455f7b

  Copy full SHA for b455f7b

Commits on Nov 14, 2022

• add FileSearch：C++枚举磁盘列表、遍历指定盘搜索特定类型文件，微信导出密钥Socket/PUT回传，包括反射DLL版本

  Mr-xn

  committed
  3ab81ec

  Copy full SHA for 3ab81ec

• add AD-Pentest-Notes：内网渗透(域渗透)学习记录

  Mr-xn

  committed
  b55184c

  Copy full SHA for b55184c

• add SharpUserIP：在域控或远程提取登录日志，快速获取域用户对应的IP地址

  Mr-xn

  committed
  298c749

  Copy full SHA for 298c749

Commits on Oct 30, 2022

• add CVE-2022-34718：TCP/IP RCE POC&&geacon_pro：跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀

  Mr-xn

  committed
  e458e81

  Copy full SHA for e458e81

Commits on Oct 24, 2022

• add CreateUser：绕过360，火绒添加用户

  Mr-xn

  committed
  dc0740e

  Copy full SHA for dc0740e

• Update README.md

  Mr-xn

  committed
  f0dab4d

  Copy full SHA for f0dab4d

Commits on Oct 23, 2022

• add AppInfoScanner：移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具&警惕工具投毒

  Mr-xn

  committed
  f457ccc

  Copy full SHA for f457ccc

Commits on Oct 17, 2022

• add AtomPePacker：多功能PE加壳工具，可用来bypass AV&SharpEventPersist：通过从事件日志中读写shellcode达到持久化&ShadowSpray：在这个域中喷洒影子凭证的工具，希望在域中的其他对象上滥用早已被遗忘的GenericWrite/GenericAll DACL

  Show description for 4081af4
  Mr-xn

  committed
  4081af4

  Copy full SHA for 4081af4

Commits on Oct 11, 2022

• add SharpADUserIP：提取DC日志，快速获取域用户对应IP地址

  Mr-xn

  committed
  60a2b45

  Copy full SHA for 60a2b45

Commits on Oct 8, 2022

• add dalfox：一个强大的开源XSS扫描工具和参数分析实用工具

  Mr-xn

  committed
  2a3d4d1

  Copy full SHA for 2a3d4d1

Commits on Oct 5, 2022

• add Freeze：使用多种技术绕过 EDR类产品加载 shellcode&Invoke-PrintDemon：利用打印机漏洞通过 PowerShell 脚本将任意文件编码成base64后解码写入任意目录,比如system 目录&VcenterKiller：一款针对Vcenter的综合利用工具

  Mr-xn

  committed
  89b0ca8

  Copy full SHA for 89b0ca8

Commits on Oct 1, 2022

• add 【Windows 提权】PetitPotato：通过PetitPotam进行本地提权

  Mr-xn

  committed
  6f3308c

  Copy full SHA for 6f3308c

Commits on Sep 29, 2022

• add srdi-rs：Rusty Shellcode 反射 DLL 注入&KnownDllUnhook：将当前加载的模块的 .txt 部分从 \KnownDlls\ 替换来绕过 edr&fastjson 1.2.80 漏洞分析

  Mr-xn

  committed
  9e80d85

  Copy full SHA for 9e80d85

Commits on Sep 27, 2022

• add DumpThatLSASS、CallBackDump、FastjsonScan、AsmShellcodeLoader

  Show description for c19863a
  Mr-xn

  committed
  c19863a

  Copy full SHA for c19863a

Commits on Sep 26, 2022

• JuicyPotatoNG：另一个 juicypotato&fastjson_payload

  Mr-xn

  committed
  04dc278

  Copy full SHA for 04dc278

Commits on Sep 21, 2022

• add 【Linux 提权】CVE-2022-2588&TomcatWeakScan：Tomcat弱口令批量扫描器

  Mr-xn

  committed
  be2c2bb

  Copy full SHA for be2c2bb

Commits on Sep 20, 2022

• add dirtycow-mem：脏牛利用C源码&使用Sqlmap的你可能踩中了“蜜罐”

  Show description for 5c0f0e3
  Mr-xn

  committed
  5c0f0e3

  Copy full SHA for 5c0f0e3

Commits on Sep 14, 2022

• add CNVD-2022-60632 畅捷通任意文件上传漏洞复现&teleport 堡垒机任意用户登录漏洞

  Show description for 50e57f1
  Mr-xn

  committed
  50e57f1

  Copy full SHA for 50e57f1

Commits on Sep 11, 2022

• add iscsicpl_bypassUAC无弹窗版&SharpHostInfo：一款快速探测内网主机信息工具

  Mr-xn

  committed
  c037a5c

  Copy full SHA for c037a5c

Commits on Sep 9, 2022

• add 云上安全攻防实战手册&1nhann修改和增加诸多新的反序列化攻击链&文库收集

  Mr-xn

  committed
  491f418

  Copy full SHA for 491f418

Commits on Sep 8, 2022

• add EasyPen：Python + wxPython编写、提供简洁图形界面、支持跨平台的安全扫描工具，可用于企业内外网巡检、应急响应

  Mr-xn

  committed
  6d818ce

  Copy full SHA for 6d818ce

Commits on Sep 6, 2022

• add 【Linux 提权】CVE-2022-2639-PipeVersion

  Mr-xn

  committed
  7fe1277

  Copy full SHA for 7fe1277

• add cs2modrewrite：将 Cobalt Strike 配置文件转换为 modrewrite 脚本

  Show description for b2d7905
  Mr-xn

  committed
  b2d7905

  Copy full SHA for b2d7905

Commits on Sep 2, 2022

• add autodeauth：用于自动解除本地网络身份验证的工具&EntropyFix：减少payload 的熵

  Mr-xn

  committed
  3539a48

  Copy full SHA for 3539a48

Commits on Aug 31, 2022

• add ThinkPHP 5.0.X代码审计-5.0.24反序列化

  Mr-xn

  committed
  9c75b91

  Copy full SHA for 9c75b91

• add Elevator：UAC Bypass by abusing RPC and debug objects

  Show description for 6ada170
  Mr-xn

  committed
  6ada170

  Copy full SHA for 6ada170

Commits on Aug 28, 2022

• add mscan：一款域渗透扫描工具，方便一键自动化、全方位的信息收集及扫描域提权漏洞

  Mr-xn

  committed
  d9a3c34

  Copy full SHA for d9a3c34

Commits on Aug 25, 2022

• add 【Linux 提权】CVE-2022-32250-exploit

  Mr-xn

  committed
  304edcc

  Copy full SHA for 304edcc

Commits on Aug 24, 2022

• add rootkit 后门&Executor内存马&Upgrade内存马&Shiro 历史漏洞分析

  Mr-xn

  committed
  8904bae

  Copy full SHA for 8904bae

• add estk：查询和备份各种 Elasticsearch 和 Kibana 版本的数据工具

  Mr-xn

  committed
  69bb4d6

  Copy full SHA for 69bb4d6

Commits on Aug 23, 2022

• add 更新部分漏洞分析文章

  Mr-xn

  committed
  0b79d11

  Copy full SHA for 0b79d11

• add RPC-Backdoor：模拟 RPC 后门、go-memorydll：内存 dll 的 go 包装器、

  Show description for bc31430
  Mr-xn

  committed
  bc31430

  Copy full SHA for bc31430

Commits on Aug 21, 2022

• Merge pull request Mr-xn#10 from wr0x00/master

  Show description for bdc8e21
  Mr-xn

  authored
  bdc8e21

  Copy full SHA for bdc8e21

• fix vul readme path

  Mr-xn

  authored
  9f22f66

  Copy full SHA for 9f22f66

Pagination

Previous

Next