CVE-2021-44529 Ivanti EPM 云服务设备 (CSA) 中的代码注入漏洞允许未经身份验证的用户以有限的权限（nobody）执行任意代码。 - jax7sec/CVE-2021-44529

Scripted Linux Privilege Escalation for the CVE-2022-0847 "Dirty Pipe" vulnerability - GitHub - rexpository/linux-privilege-escalation: Scripted Linux Privilege Escalation for the...

Scripted Linux Privilege Escalation for the CVE-2022-0847 "Dirty Pipe" vulnerability - rexpository/linux-privilege-escalation

asp.net内存马检测工具. Contribute to yzddmr6/ASP.NET-Memshell-Scanner development by creating an account on GitHub.

1. 通过go实现的高性能sql拼接工具(使用到 sync.Pool, strings.Builder 等） 2. 主要场景是需要原生 sql, 如果orm可以绕过, 个人认为能让代码更加整洁，优雅，可控的打印sql log 3. 自带curd的orm操作，性能接近原生 - GitHub - xuesongtao/spellsql: 1. 通过go实现的高性能sql拼接工具(使用到 sync...

渗透测试报告/资料文档/渗透经验文档/安全书籍. Contribute to awake1t/HackReport development by creating an account on GitHub.

frp的修改版-去除特征流量免杀信息隐藏. Contribute to Goqi/goqifrp development by creating an account on GitHub.

Windows for Red Teamers. Contribute to morph3/Windows-Red-Team-Cheat-Sheet development by creating an account on GitHub.

Riyue日月-代码审计平台. Contribute to Goqi/Riyue development by creating an account on GitHub.

The poc for CVE-2022-26809 RCE via RPC will be updated here. - GitHub - sherlocksecurity/Microsoft-CVE-2022-26809-The-Little-Boy: The poc for CVE-2022-26809 RCE via RPC will be updated here.

RCE Exploit within the RPC Library (CVE-2022-26809) - F1uk369/CVE-2022-26809

将压缩包伪装成其他文件,绕过无法上传/分享的限制. Contribute to cancundeyingzi/Compressed-packet-camouflage development by creating an account on GitHub.

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具. Contribute to Mr-xn/RedTeam_BlueTeam_HW development by creating an account on GitHub.

Watchguard RCE POC CVE-2022-26318. Contribute to h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318 development by creating an account on GitHub.

Powershell to mitigate CVE-2022-29072. Contribute to tiktb8/CVE-2022-29072 development by creating an account on GitHub.

中文:渗透测试各种工具,Main下的是自己写的,Releases下的是收集的;English: penetration testing various tools,The one under Main is written by myself, and the one under Releases is collected - GitHub - CodeHack-V/Tools: 中文:渗透...

Assassin是一款精简的基于命令行的webshell管理工具，它有着多种payload发送方式和编码方式，以及精简的payload代码，使得它成为隐蔽的暗杀者，难以被很好的防御。 - b1ackc4t/Assassin

实现了一个轻量级的web端流程渲染引擎，可以用来渲染类似工作流、业务流等流程图，流程图最终可以通过序列化保存成一个json结构存储起来， 后续再通过该引擎反序列化json数据到画布上。 - GitHub - 501351981/simple-flow-web: 实现了一个轻量级的web端流程渲染引擎，可以用来渲染类似工作流、业务流等流程图，流程图最终可以通过序列化保存成一个json结构存储起...

总结了20+.Net反序列化文章，持续更新. Contribute to Ivan1ee/NET-Deserialize development by creating an account on GitHub.