CVE HUB 👾 – Telegram

CVE HUB 👾

788 subscribers

19.3K links

Github Red team resource push
Github 红队资源推送
Cve/Rce/Exploit/Redteam/漏洞利用/红队

Channel push 24/7 (real time)
频道全天候推送(实时)

Download Telegram

About

Blog

Apps

Platform

788 subscribers

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-21661
Github: https://github.com/z92g/CVE-2022-21661
Describe:
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.

GitHub - z92g/CVE-2022-21661: WordPress WP_Query SQL Injection POC

WordPress WP_Query SQL Injection POC. Contribute to z92g/CVE-2022-21661 development by creating an account on GitHub.

50 views13:16

👾KEYWORD SERVICE 🏷#redteam
Name: nimc2
Github: https://github.com/d4rckh/nimc2

GitHub - andreiverse/grc2: grim reaper c2

grim reaper c2. Contribute to andreiverse/grc2 development by creating an account on GitHub.

48 views13:50

👾KEYWORD SERVICE 🏷#exploit
Name: FlameCord
Github: https://github.com/2lstudios-mc/FlameCord

49 views13:54

👾KEYWORD SERVICE 🏷#exploit
Name: COLRv1-mono
Github: https://github.com/Lorp/COLRv1-mono

GitHub - Lorp/COLRv1-mono: Demos and documentation of fonts exploiting the COLRv1 spec in monochrome

Demos and documentation of fonts exploiting the COLRv1 spec in monochrome - GitHub - Lorp/COLRv1-mono: Demos and documentation of fonts exploiting the COLRv1 spec in monochrome

43 views14:32

👾KEYWORD SERVICE 🏷#exploit
Name: libc-database
Github: https://github.com/niklasb/libc-database

GitHub - niklasb/libc-database: Build a database of libc offsets to simplify exploitation

Build a database of libc offsets to simplify exploitation - niklasb/libc-database

43 views14:47

👾KEYWORD SERVICE 🏷#exploit
Name: LadonGo
Github: https://github.com/k8gege/LadonGo

GitHub - k8gege/LadonGo: Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost…

Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/Htt...

49 views14:47

👾KEYWORD SERVICE 🏷#webshell
Name: Ladon
Github: https://github.com/k8gege/Ladon

GitHub - k8gege/Ladon: Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShel…

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exc...

53 views15:10

👾KEYWORD SERVICE 🏷#webshell
Name: Aggressor
Github: https://github.com/k8gege/Aggressor

GitHub - k8gege/Aggressor: Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit…

Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec...

50 views15:14

👾KEYWORD SERVICE 🏷#webshell
Name: K8tools
Github: https://github.com/k8gege/K8tools

GitHub - k8gege/K8tools: K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/Ove…

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN...

56 views15:14

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-EXCEL-XLS-EXPLOIT-CLEAN-n-
Github: https://github.com/codingcore2/SILENT-EXCEL-XLS-EXPLOIT-CLEAN-n-

GitHub - codingcore2/SILENT-EXCEL-XLS-EXPLOIT-CLEAN-n-

Contribute to codingcore2/SILENT-EXCEL-XLS-EXPLOIT-CLEAN-n- development by creating an account on GitHub.

46 views15:15

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-DOC-EXPLOIT-CLEAN-n-
Github: https://github.com/codingcore2/SILENT-DOC-EXPLOIT-CLEAN-n-

GitHub - codingcore2/SILENT-DOC-EXPLOIT-CLEAN-n-

Contribute to codingcore2/SILENT-DOC-EXPLOIT-CLEAN-n- development by creating an account on GitHub.

41 views15:15

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-PDF-EXPLOIT-CLEAN-n-
Github: https://github.com/codingcore2/SILENT-PDF-EXPLOIT-CLEAN-n-

GitHub - codingcore2/SILENT-PDF-EXPLOIT-CLEAN-n-

Contribute to codingcore2/SILENT-PDF-EXPLOIT-CLEAN-n- development by creating an account on GitHub.

40 views15:15

👾KEYWORD SERVICE 🏷#exploit
Name: PowerLadon
Github: https://github.com/k8gege/PowerLadon

GitHub - k8gege/PowerLadon: Ladon hacking Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute…

Ladon hacking Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC - k8gege/PowerLadon

47 views15:18

👾KEYWORD SERVICE 🏷#exploit
Name: PDF-DOC-XLS-EXPLOIT
Github: https://github.com/MotGSSS/PDF-DOC-XLS-EXPLOIT

GitHub - MotGSSS/PDF-DOC-XLS-EXPLOIT

Contribute to MotGSSS/PDF-DOC-XLS-EXPLOIT development by creating an account on GitHub.

🤩1

42 views15:30

👾KEYWORD SERVICE 🏷#rce
Name: Remote-code-execution
Github: https://github.com/2Bor3d/Remote-code-execution

GitHub - 2Bor3d/Remote-code-execution: This is a WIP remote code execution fully writen in python. Don't use this for melicius…

This is a WIP remote code execution fully writen in python. Don't use this for melicius purpuses! Just don't use it at all, in fact there are better rce programs than this. Alsow if...

44 views15:48

👾KEYWORD SERVICE 🏷#exploit
Name: communication_quality
Github: https://github.com/SinaOzdemir/communication_quality

GitHub - SinaOzdemir/communication_quality: Given the politicization of European integration, effective public communication by…

Given the politicization of European integration, effective public communication by the European Union (EU) has gained importance. Especially for rather detached supranational executives, social me...

43 views16:00

👾KEYWORD SERVICE 🏷#红队
Name: AppInfoScanner
Github: https://github.com/kelvinBen/AppInfoScanner

GitHub - kelvinBen/AppInfoScanner: 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端…

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。 - kelvinBen/AppInfoScanner

47 views16:37

👾KEYWORD SERVICE 🏷#exploit
Name: Roblox-Executor
Github: https://github.com/MJMODZZ/Roblox-Executor

GitHub - MJMODZZ/Roblox-Executor: ✅ a very simple roblox executor for lua scripts (roblox executor, roblox exploit, roblox cheat…

✅ a very simple roblox executor for lua scripts (roblox executor, roblox exploit, roblox cheat, roblox mods) using WeAreDevsAPI ✅ - GitHub - MJMODZZ/Roblox-Executor: ✅ a very simple roblox executor...

43 views16:41

👾KEYWORD SERVICE 🏷#webshell
Name: DFShell
Github: https://github.com/D3Ext/DFShell

GitHub - D3Ext/DFShell: D3Ext's Forward Shell

D3Ext's Forward Shell . Contribute to D3Ext/DFShell development by creating an account on GitHub.

41 views16:52

👾KEYWORD SERVICE 🏷#exploit
Name: solsec
Github: https://github.com/0xsanny/solsec

GitHub - sannykim/solsec: A collection of resources to study Solana smart contract security, auditing, and exploits.

A collection of resources to study Solana smart contract security, auditing, and exploits. - sannykim/solsec

40 views18:11

** Behinder ** 🔧Tool update
Tools name：Behinder
Tools url：~~https://github.com/rebeyond/Behinder/releases/tag/Behinder_v4.0.1~~

❗️This tool has a backdoor, please do not use it.
❗️本工具有后门，请勿使用。

Release Behinder_v4.0.1 · rebeyond/Behinder

###2022.7.29 v4.0.1 更新日志
1.上传下载增加百分比进度显示；
2.修复了内置传输协议的逻辑错误；
3.修复了新版Javafx SDK无法打开程序的问题；
4.修复了php环境主机模块的问题；
5.修复了新建文件UI无法正常显示的问题；
6.其他一些优化；

37 viewsedited 18:33