Interface detection/一款自动化挖掘未授权访问漏洞的信息收集工具. Contribute to cikeroot/IDT development by creating an account on GitHub.

FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用 - lemono0/FastJsonParty

Description and exploit of CVE-2023-33831 affecting FUXA web-based Process Visualization (SCADA/HMI/Dashboard) software. - rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831

go CVE-2023-24538 patch issue resolver - Dunfell. Contribute to skulkarni-mv/goIssue_dunfell development by creating an account on GitHub.

PoC for CVE-2023-4911. Contribute to leesh3288/CVE-2023-4911 development by creating an account on GitHub.

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。 - 78778443/QingScan

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool - ffffffff0x/f8x

CVE-2023-4911 proof of concept. Contribute to RickdeJager/CVE-2023-4911 development by creating an account on GitHub.

Useful C2 techniques and cheatsheets learned from engagements - wsummerhill/C2_RedTeam_CheatSheets

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接 - Schira4396/VcenterKiller

A tool for finding vulnerable libwebp(CVE-2023-4863) - murphysecurity/libwebp-checker

PoC for CVE-2023-44961. Contribute to ggb0n/CVE-2023-44961 development by creating an account on GitHub.

Useful C2 techniques and cheat sheets learned from engagements - wsummerhill/C2_RedTeam_CheatSheets

PoC of CVE-2023-42793. Contribute to Zenmovie/CVE-2023-42793 development by creating an account on GitHub.

A set of Ansible scripts that can be used for Incident Response competitions by the Red Team to create low-hanging fruit for the Blue Team to find (and Red Team to exploit) - ads3853/TrainingWheels...

Visual Studio RCE using PreBuild target on .csproj file - exorcize/csproj-rce