Useful C2 techniques and cheat sheets learned from engagements - wsummerhill/C2_RedTeam_CheatSheets

PoC of CVE-2023-42793. Contribute to Zenmovie/CVE-2023-42793 development by creating an account on GitHub.

A set of Ansible scripts that can be used for Incident Response competitions by the Red Team to create low-hanging fruit for the Blue Team to find (and Red Team to exploit) - ads3853/TrainingWheels...

Visual Studio RCE using PreBuild target on .csproj file - exorcize/csproj-rce

CVE-2023-41892 - Craft CMS Remote Code Execution (RCE) - zaenhaxor/CVE-2023-41892

This repository contains a collection of cheat sheets for bug bounty hunters. These cheat sheets cover a variety of topics, including SQL injection, XSS, SSRF, RCE, open redirect, command injection...

Mass exploit - CVE-2023-38501 - Copyparty < Cross-Site Scripting [XSS] - codeb0ss/CVE-2023-38501-Exploit

爬取智能合约结合深度学习技术对其进行重入漏洞检测，同时分析其上下文对其进行字节码重写修复. Contribute to eliQAQ/detect-vulnerable-contract development by creating an account on GitHub.

Simple demo of a Remote Code Execution (RCE) Vulnerability in Node.js and how using distroless prevents it. - GitHub - mwager/nodejs_exploit: Simple demo of a Remote Code Execution (RCE) Vulnerabi...

🎭 SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行springboot未授权扫描/敏感信息扫描以及进行spring框架漏洞扫描与验证的综合利用工具。 [SBSCAN is a penetration testing tool focused on the spring framework that can scan springboot sensitiv...

代码审计学习. Contribute to ArrestX/audit_study development by creating an account on GitHub.

A fully public exploit of the CVE-2020-0022 BlueFrag Android RCE Vulnerability (tested on Pixel 3 XL) - themmokhtar/CVE-2020-0022

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence - ErikWynter/CVE-2023-22515-Scan

RTO Exam notes and tools, get your Red Team Operations by Zero-Point Security. - GitHub - Certs-Study/CRTO-Certified-Red-Team-Operator: RTO Exam notes and tools, get your Red Team Operations by Zer...

面向大语言模型的提示注入攻防竞赛参赛总结. Contribute to pengwork/2023-prompt-inject-contest development by creating an account on GitHub.

这是一款在发生应急响应事件时可以快速对Windows和Linux系统的证据链进行收集的工具. Contribute to topmrmt/Emergency development by creating an account on GitHub.

Huawei ENSP攻防. Contribute to Walson171/Huawei-ENSP-Attack_defend development by creating an account on GitHub.

pathScan 是一个用Go编写的路径扫描、信息收集、指纹探索工具. Contribute to wjlin0/pathScan development by creating an account on GitHub.

用于解密并加载shellcode，支持RC4和AES两种解密方法，并使用DInvoke来动态调用WinAPI函数，从而尝试绕过某些安全解决方案 - xf555er/SharpShellcodeLoader_Rc4Aes