poc

Star

Here are 1,907 public repositories matching this topic...

chaitin / xray

Star

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

security xss poc vulnerability passive-vulnerability-scanner sqlinjection vulnerability-scanner

Updated Mar 4, 2023
Vue

frohoff / ysoserial

Star

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

java serialization exploit jvm deserialization gadget poc vulnerability javadeser

Updated Jan 14, 2023
Java

Mr-xn / Penetration_Testing_POC

Star

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

exploit penetration-testing poc rce csrf cve bypass thinkphp cobalt-strike authentication-bypass getshell penetration-testing-poc csrf-webshell sql-poc poc-exp oa-getshell cve-cms php-bypass sql-getshell

Updated Mar 6, 2023
PowerShell

k8gege / K8tools

Star

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database apt exploit scanner hacking password poc brute-force pentest bypass crack privilege-escalation 0day getshell netscan

Updated Mar 5, 2023
PowerShell

ffffffff0x / 1earn

Star

暂停维护 | ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

security collection study hacking poc infosec ctf pentest markdown-article writeup blueteam ics-security security-tools pentest-tool redteam linux-learning post-penetration

Updated Dec 21, 2022
C++

trickest / cve

Star

Gather and update all available and newest CVEs with their PoC.

security exploit hacking penetration-testing poc vulnerability infosec pentesting vulnerabilities cve software-security red-team security-tools software-vulnerability software-vulnerabilities latest-cve cve-poc

Updated Mar 6, 2023
HTML

k8gege / Ladon

Star

Ladon hacking framework penetration scanner & Cobalt strike, Ladon 10.9 has 200 built-in modules, including information collection / surviving host / port scanning / service identification / password blasting / vulnerability detection / vulnerability utilization. Vulnerability detection includes ms17010 / smbghost / Weblogic / ActiveMQ

security tools hack exploit scanner hacking password poc brute-force pentest portscan security-scanner exp security-tools ladon ipscanner getshell netscan

Updated Mar 5, 2023
C#

zhzyker / exphub

Star

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

drupal exploit nexus tomcat poc vulnerability webshell exp weblogic getshell cve-2020-1938 cve-2020-2551 cve-2020-2555 cve-2020-10199 cve-2020-10204 cve-2020-2883 cve-2020-11444 cve-2020-5902 cve-2020-14882

Updated Apr 4, 2021
Python

qazbnm456 / awesome-cve-poc

Sponsor

Star

✍️ A curated list of CVE PoCs.

awesome poc cve

Updated Jan 4, 2022

Ascotbe / Medusa

Star

🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

mail virus email xss poc medusa cve metasploit-framework payload exp dnslog cobaltstrike readteam

Updated Jan 6, 2023
Python

tr0uble-mAker / POC-bomber

Star

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

poc rce fuzzing cve exp vulnerability-scanner redteam getshell poc-bomber

Updated Sep 21, 2022
Python

Lucifer1993 / AngelSword

Star

Python3编写的CMS漏洞检测框架

cms poc vulnerability-scanners

Updated Mar 29, 2022
Python

XiphosResearch / exploits

Star

Miscellaneous exploit code

python windows php security hacking exploits poc rce bypass tr-064

Updated Jan 25, 2023
Python

zan8in / afrog

Star

A Vulnerability Scanning Tools For Penetration Testing

tools penetration-testing poc vulnerability-scanner vulnerability-scanning-tools afrog

Updated Mar 3, 2023
Go

danigargu / CVE-2020-0796

Star

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

exploit poc smbghost cve-2020-0796 coronablue

Updated Dec 7, 2020
C

jweny / pocassist

Star

全新的漏洞测试框架，支持poc在线编辑、运行、批量测试。使用文档：

security poc vulnerability cve vulnerability-scanners security-tools penetration-testing-poc pocassist

Updated Sep 26, 2022
Go

k8gege / LadonGo

Star

LadonGO 4.2 Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

exploit scanner detection poc brute-force portscan security-tools ms17010 hacktools smbscan sshscan mysqlscan ftpscan bannerscan

Updated Sep 15, 2022
Go

tenable / poc

Star

Proof of Concepts

poc

Updated Jan 30, 2023
Python

1n7erface / PocList

Star

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5…

jar poc alibaba-nacos