xp0inter Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

artifactcollector

🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system

awe-osee-prep

Advanced Windows Exploitation (AWE)/Offensive Security Exploitation Expert (OSEE) Preparation for Black Hat 2021

ctp-osce

Web Exploitation, Backdooring PE, Bypassing AV, Exploit Development, Network Attacks

dnsdelivery

DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.

gokmp

String-matching in Golang using the Knuth–Morris–Pratt algorithm (KMP)

havocfork

The Havoc Framework

havocmodulesfork

Modules used by the Havoc Framework

henggefish

自动化批量发送钓鱼邮件（横戈安全团队出品）

jndiexploit-1

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

link

link is a command and control framework written in rust

log4j2_rce

log4j2 rce、poc

maldev-links

My collection of malware dev links

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

memorymodule

Library to load a DLL from memory.

neurax

A framework for constructing self-spreading binaries

oscp

Collection of things made during my OSCP journey

osctrl

Fast and efficient osquery management

poc-hub

漏洞复现：远程漏洞、本地漏洞

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile

reverse-shell-manager

sliver

Adversary Emulation Framework

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

sysmon-config

Sysmon configuration file template with default high-quality event tracing

velociraptor

Digging Deeper....

winrmshell

xp0inter.github.io

xray-core--bak

Xray, Penetrates Everything. Also the best v2ray-core, with XTLS support. Fully compatible configuration.