👾KEYWORD SERVICE 🏷#exploit
Name: wikidataESR
Github: https://github.com/cpesr/wikidataESR

👾KEYWORD SERVICE 🏷#exploit
Name: tryhackme.com-room-exploitingavulnerabilityv2
Github: https://github.com/trcyprkr/tryhackme.com-room-exploitingavulnerabilityv2

👾KEYWORD SERVICE 🏷#exploit
Name: MistyMusic
Github: https://github.com/patgur/MistyMusic

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-25260
Github: https://github.com/yuriisanin/CVE-2022-25260
Describe:
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).

👾KEYWORD SERVICE 🏷#exploit
Name: PDennSploit
Github: https://github.com/P-DennyGamingYT/PDennSploit

👾KEYWORD SERVICE 🏷#webshell
Name: P.A.S.-Fork
Github: https://github.com/cr1f/P.A.S.-Fork

👾KEYWORD SERVICE 🏷#redteam
Name: rockyou
Github: https://github.com/IrishMaestro/rockyou

** fscan ** 🔧Tool update
Tools name：fscan
Tools url：https://github.com/shadow1ng/fscan/commit/4908720acbbb4bdd369a8bfa92c7b73b0ca893cf
commitUpdate log：
socks代理时,自动-np

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-33174
Github: https://github.com/Henry4E36/CVE-2022-33174
Describe:
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.cgi) with the tmpToken cookie set to an empty string followed by a semicolon. This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd and sys.su.name fields that contain the username and password in cleartext.

👾KEYWORD SERVICE 🏷#webshell
Name: carina
Github: https://github.com/c0delatte/carina

👾KEYWORD SERVICE 🏷#免杀
Name: 37_17519
Github: https://github.com/wwwuuid2com47/37_17519

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-PDF-EXPLOIT-CLEAN-gt
Github: https://github.com/codingcore2/SILENT-PDF-EXPLOIT-CLEAN-gt

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-EXCEL-XLS-EXPLOIT-CLEAN-gt
Github: https://github.com/codingcore2/SILENT-EXCEL-XLS-EXPLOIT-CLEAN-gt

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-DOC-EXPLOIT-CLEAN-gt
Github: https://github.com/codingcore2/SILENT-DOC-EXPLOIT-CLEAN-gt

👾KEYWORD SERVICE 🏷#exploit
Name: Vbulletin-Custmerid-Checker-0day-exploit
Github: https://github.com/s4udiT3rr0rist/Vbulletin-Custmerid-Checker-0day-exploit

👾KEYWORD SERVICE 🏷#exploit
Name: XL-Hub
Github: https://github.com/chonksbro/XL-Hub

👾KEYWORD SERVICE 🏷#漏洞利用
Name: upload-exp
Github: https://github.com/youyou-pm10/upload-exp

👾KEYWORD SERVICE 🏷#内存马
Name: java-memshell-scanner
Github: https://github.com/c0ny1/java-memshell-scanner

👾KEYWORD SERVICE 🏷#exploit
Name: SeeyonExploit
Github: https://github.com/Drac0nids/SeeyonExploit

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-24780
Github: https://github.com/Acceis/exploit-CVE-2022-24780
Describe:
Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, users of the iTop user portal can send TWIG code to the server by forging specific http queries, and execute arbitrary code on the server using http server user privileges. This issue is fixed in versions 2.7.6 and 3.0.0. There are currently no known workarounds.

👾KEYWORD SERVICE 🏷#漏洞利用
Name: NKU-SOFTWARE-SAFETY
Github: https://github.com/TephrocactusHC/NKU-SOFTWARE-SAFETY