ofalwl Goto Github PK

cve-2021-4034

CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation

cve-2021-4034-nogcc

CVE-2021-4034简单优化，以应对没有安装gcc和make的目标环境

cve-2021-41773_cve-2021-42013

CVE-2021-41773 CVE-2021-42013漏洞批量检测工具

cve-2022-0847-dirtypipe-exploit

A root exploit for CVE-2022-0847 (Dirty Pipe)

cve-2022-2992

Authenticated Remote Command Execution in Gitlab via GitHub import

cve-2023-36874_bof

Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

cve-2024-21626

PoC and Detection for CVE-2024-21626

cve-2024-21626-hig

decrypttools

DecryptTools-综合解密

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dumpall

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

ebpfkit

ebpfkit is a rootkit powered by eBPF

emp3r0r

Linux/Windows post-exploitation framework made by linux user

fastjson

Fastjson姿势技巧集合

fastjsonparty

FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用

fastjsonscan

Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency

fireelf

fireELF - Fileless Linux Malware Framework

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

geacon-1

使用Golang实现CobaltStrike Beacon

geacon_plus

CobaltStrike beacon written in golang

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

gitlab-rce-11.4.7

GitLab 11.4.7 RCE exploit with different reverse shells. CVE-2018-19571 + CVE-2018-19585

gitlab-ssrf

Demonstration of CVE-2018-19571: GitLab SSRF CVE