SpringBoot 漏洞扫描利用工具,默认优先使用收集路径进行扫描（springboot_urls.txt） 当扫描不存在接口时，使用api前缀拼接扫描，可以自行添加 - doki-byte/springboot_scan

This exploit was created to exploit an XXE (XML External Entity). Through it, I read the backend code of the web service and found an endpoint where I could use gopher to make internal requests on ...

Perform With Massive Apache OFBiz Zero-Day Scanner & RCE - ThatNotEasy/CVE-2024-38856

Wordpress 4.6 RCE. Contribute to hinokop/wordpress-4.6-RCE development by creating an account on GitHub.

2345-Input-method-Software_Insecure-configuration-RCE - AabyssZG/2345-Input-method-Software_Insecure-configuration-RCE

web渗透，内网渗透，安全运营等. Contribute to q1ukk/m1q1u development by creating an account on GitHub.

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE) - hunThubSpace/CVE-2024-3105-PoC

python黑帽子-黑客与渗透测试编程之道. Contribute to maplebell/python_test development by creating an account on GitHub.

Docker Deskop giving issue CVE-2024-26308 for maven [reproduce] - crazycatMyopic/cve

Wonder CMS RCE (XSS). Contribute to charlesgargasson/CVE-2023-41425 development by creating an account on GitHub.

信息收集工具 对目标机器上的文档进行收集并打包. Contribute to simonlee-hello/FuckDoc development by creating an account on GitHub.

Contribute to insomnia-jacob/CVE-2023-41425 development by creating an account on GitHub.

内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具. Contribute to AabyssZG/FindEverything development by creating an account on GitHub.

A traffic tracker based on the clash network subscribe protocol, periodically collecting traffic information and display by web (based on Flask and Chart.js), helps to keep track of the proxy traff...

CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段. Contribute to LxxxSec/CTF-Java-Gadget development by creating an account on GitHub.

P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步. Contribute to P001water/P1finger development by creating an account on GitHub.