nanaao Goto Github PK

spring4shell

Spring4Shell , Spring Framework RCE (CVE-2022-22965) , Burpsuite Plugin

spring4shell-scan

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

springboot-vuldb

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

springcloudgatewayrce

SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er

springcore0day

SpringCore0day from https://share.vx-underground.org/ & some additional links

springexploit

Spring core bean 日志 getshell 和 Spring Cloud Function SpEL 命令执行。

springscan

SpringScan 漏洞检测 Burp插件

springshell

Spring Core RCE

springshell-rce-poc

CVE-2022-22965 - CVE-2010-1622 redux

springwebflux-memshell

SpringWebflux通用内存马

sqlmap-gtk

sqlmap GUI using PyGObject(gtk+3).

ssoh-no

User enumeration and password spraying tool for testing Azure AD

ssrf-lab

Lab for exploring SSRF vulnerabilities

ssrfmap

Automatic SSRF fuzzer and exploitation tool

sstimap

Automatic SSTI detection tool with interactive interface

starkiller

Starkiller is a Frontend for PowerShell Empire.

storm-breaker

Social engineering tool [Access Webcam & Microphone & Location Finder] With Python

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

struts2-rce

A Burp Extender for checking for struts 2 RCE vulnerabilities.

struts2_s2-062_cve-2021-31805

Apache Struts2 S2-062远程代码执行漏洞(CVE-2021-31805) | 反弹Shell

struts2vulstools

Struts2系列漏洞检查工具

sts2g

Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang

subdomz

All in One Subdomain Enumeration Tool

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

subscan

SubScan is a tool to quickly scan subdomains

subscraper

Perform subdomain enumeration through various techniques and retrieve detailed output to aid in further testing.

sudo_inject

[Linux] Two Privilege Escalation techniques abusing sudo token