A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass - K3ysTr0K3R/CVE-2023-32315-EXPLOIT

CVE-2023-50643. Contribute to giovannipajeu1/CVE-2023-50643 development by creating an account on GitHub.

A scanning utility and PoC for CVE-2023-50164. Contribute to bcdannyboy/CVE-2023-50164 development by creating an account on GitHub.

A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader - Ap3x/COFF-Loader

This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools. Timestomps a target file to have the time attributes match ...

Tool to run Atomic Red Team tests on an isolated macOS VM. - jonod8698/macos-sandbox-vm

Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604 - GitHub - dcm2406/CVE-Lab: Instructions for exploiting vulnerabilities CVE-2021-44228 and CVE-2023-46604

Multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via department...

Simulates CVE-2023-4966 Citrix Bleed overread bug. Contribute to morganwdavis/overread development by creating an account on GitHub.

A Slack bot phishing framework for Red Teaming exercises - Drew-Sec/EvilSlackbot

RT-MASK: Red Team Mask for IPv4 to IPv6 Obfuscation - msimon96/RT-MASK

LoaderGo-快速生成免杀木马GUI版本，bypass主流杀软. Contribute to di0xide-U/LoaderGo development by creating an account on GitHub.

A hard SQLi-RCE web challenge that I wrote for Securinets ISI Mini CTF - wassila11/Baby_CQLi

octopus高校教学综合平台，主要用于对教师，学生，管理的信息管理，课程管理，专业信息管理，班级管理，可以添加题库，可以上传下载教学资料，可以设置考试试卷，可以进行在线考试和自动评分。本系统基于若依框架，感谢若依的开源，RuoYi 是一个 Java EE 企业级快速开发平台，基于经典技术组合（Spring Boot、Apache Shiro、MyBatis、Thymeleaf、Bootst...

FOFA EX 是一款基于fofa api（也可导入鹰图、夸克文件）实现的红队综合利用工具，可基于模板把工具作为插件进行集成，自动化进行资产探测，目前提供的插件功能如下：探活、 nuclei 模板扫描、IP反查域名、域名反查 ICP 备案、dismap 指纹扫描 - 10cks/fofaEX

Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164") - dwisiswant0/cve-2023-50164-poc

Exploit Of Pre-auth RCE in Apache Ofbiz!! Contribute to 0xrobiul/CVE-2023-49070 development by creating an account on GitHub.

MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques - Chocapikk/CVE-2023-50917

An access control flaw was identified, potentially leading to unauthorized access to critical webservice endpoints within Joomla! CMS versions 4.0.0 through 4.2.7. This vulnerability could be explo...

记录burp插件编写 思路 以及过程. Contribute to robot183/BurpSuite-FileRead development by creating an account on GitHub.