ronoski Goto Github PK

my-poc-exploits

PoC exploits I wrote. They're as is and I will not offer support

nuclei-templates-collection

Nuclei Templates Collection

orangetsai-springboot-actuator-poc

oswe

OSWE Preparation

paper

Web Security Technology & Vulnerability Analysis Whitepapers

pathbrute

Pathbrute

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-study-notes

Penetration Testing notes, resources and scripts

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

poc

Repo for proof of concept exploits and tools.

poc-1

Proofs-of-concept

poc-in-github

PoC auto collect from GitHub.

pocc

PoC. Severity critical.

rbscan

remote-method-guesser

Java RMI Vulnerability Scanner

shiro_rce_exp

Shiro RCE (Padding Oracle Attack)

shodan_login

Login to Shodan and scraping web content automatically

spring-boot-actuator-h2-rce

Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database

spring-view-manipulation

When MVC magic turns black

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

struts2-scan

Struts2全漏洞扫描利用工具

tutorials

Just Announced - "Learn Spring Security OAuth":

use-ysoserial

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

vuln-velocity

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

weblogicscanner

weblogic 漏洞扫描工具。目前包含 CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890

ws-attacker

WS-Attacker is a modular framework for web services Security penetration testing.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档