gougou123-hash Goto Github PK

123456

大大

airbug

Airbug(空气洞)，收集漏洞poc用于安全产品

bug_report

bylibrary

白阁文库内测版

cnvd-2021-09650

锐捷NBR路由器接口存在命令注入，攻击者可远程执行命令。脚本支持批量扫描和单个cmdshell模式。

cve-2019-12725

ZeroShell命令执行漏洞批量扫描poc+exp

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gougou.github.io

gougou_blog

h1domains

HackerOne "in scope" domains

jspspy.jsp

Jsp木马远程控制脚本（大马）

log4j_poc

notquite0dayfriday

This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.

ofx

漏洞批量扫描框架，0Day/1Day全网概念验证，~~刷洞，刷肉鸡用~~

poc_proxylogon

Microsoft Exchange ProxyLogon PoC (CVE-2021-26855)

poclist

漏洞POC、EXP合集，持续更新。Apache Druid-任意文件读取（CVE-2021-36749）、ConfluenceRCE（CVE-2021-26084）、ZeroShell防火墙RCE（CVE-2019-12725）、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStudyRCE、ShowDoc任意文件上传、原创先锋后台未授权、Kyan账号密码泄露、TerraMasterTos任意文件读取、TamronOS-IPTV系统RCE、Wayos防火墙账号密码泄露

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

web-security-tools

Scripts and resources used for my talk about web-security