astxng Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。

c-jwt-cracker

JWT brute force cracker written in C

cloudtools

云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等

cve

Gather and update all available and newest CVEs with their PoC.

cve-2020-15778-exploit

Exploit for CVE-2020-15778(OpenSSH vul)

cve-2020-1938-tomact-file_include-file_read

Tomcat的文件包含及文件读取漏洞利用POC

cve-2021-3156-plus

CVE-2021-3156非交互式执行命令

cve-2022-21661

WordPress WP_Query SQL Injection POC

cve-2023-22527

Three go-exploits exploiting CVE-2023-22527 to execute arbitrary code in memory

cve-2023-38408

PoC for the recent critical vuln affecting OpenSSH versions < 9.3p2

cve-2024-6387

This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

debcrypt

A script crack bcrypt hash.

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fail2ban-bypass

This Repository contains brute force scripts using TOR Proxies to bypass fail2ban

fofa-collect

Fofa平台采集工具

fofa-hack

非付费会员，fofa数据采集工具

fuzzing-dicts

Web Security Dictionary

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

iis-pentest

jenkins-credentials-decryptor

Command line tool for dumping Jenkins credentials.

jira_scan

一款Jira的扫描工具

jndi-injection-exploit-plus

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

jwt-cracker

Simple HS256, HS384 & HS512 JWT token brute force cracker.

jwtcat

A CPU-based JSON Web Token (JWT) cracker and - to some extent - scanner.

mageni

Open-source vulnerability scanner

navicat-linux

Navicat Patch & Keygen for Linux

odat

ODAT: Oracle Database Attacking Tool

openconnect-auth-hack

Changes Default U/P auth for Openconnect to use Username & Password on one screen.