lcarea,lcarea,github

护网2020的一些情报共享，漏洞通报，还有打断红队的腿！！

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

iis_shortname_scanner

an IIS shortname Scanner

immmmm

iterm2-zmodem

在 Mac 下，实现与服务器进行便捷的文件上传和下载操作

kernel-exploits

Various kernel exploits

lamp-for-docker

docker版lamp

markdown-syntax-cn

Markdown 语法简体中文版（fork 于繁体中文版 http://markdown.tw/ ）

markdown-syntax-zhtw

Markdown 語法說明中文版

metasploit-framework

Metasploit Framework

ms15-034-iis-active-dos-exploit-poc

Proof of concept exploit script used to exploit the MS15-034 vulnerability in the Windows HTTP Protocol Stack (HTTP.sys)

nmap-converter

Python script for converting nmap reports into XLS

passhunt

Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pocsuite_poc

collection poc use pocsuite framework

python-pub

python获取所有qq好友、全部群所有成员部分信息，并保存列表至电子表格

sitoi-blog

Sitoi 博客源码

spring-cve

This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed "SpringShell".