Tinker Script for CVE-2022-23046. Contribute to bernauers/CVE-2022-23046 development by creating an account on GitHub.

Tool to facilitate the management of our webshell from a terminal. - GitHub - DarkTrojanDev/PwnWebShell: Tool to facilitate the management of our webshell from a terminal.

CNA that interacts with a JAR file to dynamically rename GUI tabs within Cobalt Strike from a JSON file. - EspressoCake/DynamicTabRename

通过jsp注入valve内存马，可以忽略框架影响，通用tomcat789. Contribute to Ghost2097221/addMemShellsJSP development by creating an account on GitHub.

Android XML自动 序列化/反序列化. Contribute to tencentyun/android-xml-serializer-deserializer development by creating an account on GitHub.

CVE-2022-1292. Contribute to li8u99/CVE-2022-1292 development by creating an account on GitHub.

CVE-2022-29221 Proof of Concept Code - Smarty RCE. Contribute to sbani/CVE-2022-29221-PoC development by creating an account on GitHub.

通过xpath注解对象的方式序列化以及反序列化xml. Contribute to wmz46/xpathmapper development by creating an account on GitHub.

Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540） - GitHub - Pear1y/CVE-2022-0540-RCE: Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540）

整理一些渗透测试用到的东西. Contribute to Mechoy/WEB development by creating an account on GitHub.

C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary comm...

RedTeam - Red Team Tools. Contribute to AnLoMinus/RedTeam development by creating an account on GitHub.

<随时更新>USTC（南七）自动健康打卡+自动报备，操作简便。基于fork的老脚本进行了很多修改。使用github服务器自动打卡、无需配置依赖包、采用验证码识别进行身份认证，防止认证系统修补绕过漏洞。已正常运作超过一年，健康打卡系统没改的情况下绝对稳定。 - GitHub - Kobe972/USTC-COVID19-AutoReport: <随时更...

旋转验证码绕过, 本项目基于 构建图像特征库 预测验证码旋转角度的一种解决方案 欢迎 Star ⭐ - GitHub - aiden2048/Rotate-Captcha-Angle-Prediction: 旋转验证码绕过, 本项目基于 构建图像特征库 预测验证码旋转角度的一种解决方案 欢迎 Star ⭐

Azure Container Instances Distributed Operations (acido CLI) for Red Team Operations through Azure Cloud. - GitHub - merabytes/acido: Azure Container Instances Distributed Operations (acido CLI) f...

java反序列化笔记. Contribute to xianbeil/javaSer development by creating an account on GitHub.

Cybersecurity Attacks - Red Team Strategies, Published by Packt - GitHub - PacktPublishing/Cybersecurity-Attacks---Red-Team-Strategies: Cybersecurity Attacks - Red Team Strategies, Published by Packt

Wefir's webshell : a custom webshell client. Contribute to mrlongsword/Wefir-webshell development by creating an account on GitHub.

Python script to exploit CVE-2022-29464 (mass mode) - Chocapikk/CVE-2022-29464

一个自动挖掘漏洞的框架，日后会发展成强大的信息收集+漏洞挖掘脚本！. Contribute to Throokie/MmpScan development by creating an account on GitHub.

《Python黑帽子-黑客与渗透测试编程之道》(Black Hat Python, 2nd Edition)阅读笔记 - GitHub - Relph1119/black-hat-python-2nd: 《Python黑帽子-黑客与渗透测试编程之道》(Black Hat Python, 2nd Edition)阅读笔记