xdreamseeker Goto Github PK

code_audit

java/php代码审计

com.netease.vopen

Netease open course was leaked android client source.

csplugins

Cobaltstrike Plugins

cve-2016-5195

A CVE-2016-5195 exploit example.

cve-2018-3191

CVE-2018-3191 反弹shell

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2020-1473

Test tool for CVE-2020-1472

cve-2020-14882_all

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

cve-2020-1938-tomact-file_include-file_read

Tomcat的文件包含及文件读取漏洞利用POC

cve-2020-8193

cve-2021-22005-exp

cve-2021-2394

POC of CVE-2021-2394

cve-2021-3156

cve-2021-4034

CVE-2021-4034 1day

cve-2021-43267

Local PoC exploit for CVE-2021-43267 (Linux TIPC)

cve-2022-22965

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

cve-2022-22972

cve-2022-23131

cve-2022-23131 zabbix-saml-bypass-exp

cve-2023-21839

Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)

dingtalk-rce

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

django-request-mapping

use django url very very very comfortable

django-siteuser

Register, Login, OAuth2, Upload avatar...

django_auth_ldap3

A library for connecting Django's authentication system to an LDAP directory

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dora

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

dzzoffice

dzzoffice

easytrader

提供券商华泰/佣金宝/银河/广发/雪球的基金、股票自动程序化交易，量化交易组件

edocs

eDocs is a WordPress theme that helps create and publish documents to make them digital by default.

fastjson-scanner

a burp extension to find where use fastjson