👾KEYWORD SERVICE 🏷#exploit
Name: messy
Github: https://github.com/atomdog/messy

👾KEYWORD SERVICE 🏷#exploit
Name: BinaryExploit
Github: https://github.com/vuongle-vigo/BinaryExploit

👾KEYWORD SERVICE 🏷#exploit
Name: Bella
Github: https://github.com/00xkhaled/Bella

** fscan ** 🔧Tool update
Tools name：fscan
Tools url：https://github.com/shadow1ng/fscan/commit/38e48ba4205196e042db8f832a7789b76ee61c5e
commitUpdate log：
Merge pull request #225 from evilAdan0s/main

去除弱特征：过时UA头

👾KEYWORD SERVICE 🏷#rce
Name: burp_log4j_rce_scaner
Github: https://github.com/secxh/burp_log4j_rce_scaner

👾KEYWORD SERVICE 🏷#exploit
Name: edoardottt
Github: https://github.com/edoardottt/edoardottt

👾KEYWORD SERVICE 🏷#redteam
Name: redteam03
Github: https://github.com/tuantv89/redteam03

👾KEYWORD SERVICE 🏷#exploit
Name: valhalla
Github: https://github.com/bastienbournas/valhalla

👾KEYWORD SERVICE 🏷#exploit
Name: BeEF-en-ubuntu-22.04
Github: https://github.com/demontaim/BeEF-en-ubuntu-22.04

👾KEYWORD SERVICE 🏷#exploit
Name: 42Rainfall
Github: https://github.com/Jean-xavierr/42Rainfall

👾KEYWORD SERVICE 🏷#rce
Name: rcedit-feedstock
Github: https://github.com/conda-forge/rcedit-feedstock

👾KEYWORD SERVICE 🏷#exploit
Name: PC-Exploits
Github: https://github.com/kraemr/PC-Exploits

👾KEYWORD SERVICE 🏷#redteam
Name: RedTeamWiki
Github: https://github.com/Crofto/RedTeamWiki

👾KEYWORD SERVICE 🏷#exploit
Name: Moses
Github: https://github.com/Kyrie-Zhao/Moses

👾KEYWORD SERVICE 🏷#webshell
Name: terro-php-webshell
Github: https://github.com/grabowskiadrian/terro-php-webshell

👾KEYWORD SERVICE 🏷#sql_injection
Name: fastsqlinjection
Github: https://github.com/kursadalsan/fastsqlinjection

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-31692
Github: https://github.com/SpindleSec/CVE-2022-31692
Describe:
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an application is vulnerable when all of the following are true: The application expects that Spring Security applies security to forward and include dispatcher types. The application uses the AuthorizationFilter either manually or via the authorizeHttpRequests() method. The application configures the FilterChainProxy to apply to forward and/or include requests (e.g. spring.security.filter.dispatcher-types = request, error, async, forward, include). The application may forward or include the request to a higher privilege-secured endpoint.The application configures Spring Security to apply to every dispatcher type via authorizeHttpRequests().shouldFilterAllDispatcherTypes(true)

👾KEYWORD SERVICE 🏷#exploit
Name: DDOS-project
Github: https://github.com/DANO-AMP/DDOS-project

👾KEYWORD SERVICE 🏷#exploit
Name: quackforfun
Github: https://github.com/gammadopplermc/quackforfun

👾KEYWORD SERVICE 🏷#rce
Name: rcEnel
Github: https://github.com/fevegag/rcEnel

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-0185
Github: https://github.com/featherL/CVE-2022-0185-exploit
Describe:
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.