avento Goto Github PK

-bjdctf-2nd-poc

apache_druid_jndi_vuln

Apache Druid JNDI Vulnerable

as

xyw

blog

一些文章

codeqlvuln

CodeQL 的 JAVA 漏洞挖掘学习

cve-2023-0669

GoAnywhere MFT CVE-2023-0669 LicenseResponseServlet Deserialization Vulnerabilities Python RCE PoC(Proof of Concept)

cve-2023-21971_analysis

CVE-2023-21971 Connector/J RCE Analysis分析

cve-2023-22515

CVE-2023-22515: Confluence Broken Access Control Exploit

cve-2023-22527_confluence_rce

CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server PoC

cve-2023-32031

CVE-2023-32031 MS Exchange PowerShell backend RCE

gitas

hutool-codeql

🍬A set of tools that keep Java sweet.

img

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

materials

Bonus materials, exercises, and example projects for our Python tutorials

memshell4spring

Memory Webshell for Spring Web - 适用于 Spring Web 的内存马

msrc-api

A collection of tools to interact with Microsoft Security Response Center API

nc6.5_ncmessageservlet_rce

NC6.5 NCMessageServlet 反序列化

notea

📒 Self hosted note taking app stored on S3

null

null

seclearning

seeyonajaxgetshell

致远OA seeyon未授权漏洞批量getshell

trackerslist

Updated list of public BitTorrent trackers

trackerslistcollection

🎈 Updated daily! A list of popular BitTorrent Trackers! / 每天更新！全网热门 BT Tracker 列表！⭐++

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

zdi-can-22101

(0Day) Microsoft Exchange CreateAttachmentFromUri Server-Side Request Forgery Information Disclosure Vulnerability