rce

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Top disclosed reports from HackerOne

Java web common vulnerabilities and security code which is base on springboot and spring security

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

Notes about attacking Jenkins servers

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Miscellaneous exploit code

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Check your WAF before an attacker does

Redis(<=5.0.5) RCE

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Getting started with java code auditing 代码审计入门的小项目

spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧

for mass exploiting

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things