jkana Goto Github PK

apache-solr-8.3.1-rce

RCE on Apache Solr 8.3.1

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

cobaltstrike

CobaltStrike's source code

cve

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

cve-2020-17144-exp

Exchange2010 authorized RCE

cve-2021-44529

CVE-2021-44529 PoC

cve-2021-45041

PoC for CVE-2021-45041

cve-2021-45897

PoC for CVE-2021-45897

cve-2022-22947-poc

CVE-2022-22947批量检测脚本，超时时间不超过2s，已更新可反弹shell的EXP，欢迎师傅们试用

cve-2022-23940

PoC for CVE-2022-23940

cve-2022-26133

Atlassian Bitbucket Data Center反序列化漏洞(CVE-2022-26133)批量验证和利用脚本

cve-2022-28219

PoC for ManageEngine ADAudit Plus CVE-2022-28219

cve-2022-42475

POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon

cve-2023-3519

cve-2023-46604

cve-2023-46604-rce-reverse-shell-apache-activemq

Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)

exploitremotingservice

A tool to exploit .NET Remoting Services

genericpotato

SweetPotato but for generic HTTP/SMB

gila-cms-1.16.0-shell-upload

hitcon-training

For Linux binary Exploitation

horizontcms-1.0.0-beta-shell-upload

jamf-log4j

jar-analyzer

Jar Analyzer Project

jndi-injection-exploit-plus

50+ Gadgets(20 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

pinkerton

🕵️ Pinkerton is an JavaScript file crawler and secret finder developed in Python

polyglot-xss-image

Script create polyglot-xss-image

rce

Distributed, workflow-driven integration environment

red_team_tool_countermeasures

spring-cloud-function-spel-rce

Spring-cloud-function-SpEL-RCE 批量检测脚本，反弹shell_EXP,欢迎师傅们试用

springboot-scan

针对SpringBoot的开源渗透框架