xzblueidea Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

aboutsecurity

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

android-penetration

there are some guidelines for us to do penetration on Android application

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

backdoor_rootkit

beret-81.github.io

blasting_dictionary

爆破字典

burpsuite

BurpSuite using the document and some extensions

burpsuite_pro_v1.7.32

BurpSuite_Pro_v1.7.32

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypassuac

captfencoder

CaptfEncoder 跨平台网络安全工具套件

cms-hunter

CMS漏洞测试用例集合

cmspoc

CMS渗透测试框架-A CMS Exploit Framework

cobalt-strike-persistence

cobalt strike 自启动脚本

cobra

Cobra - Cobra is a static code analysis system that automates the detecting vulnerabilities and security issue.(白盒代码安全审计系统)

ctf-tools

Some setup scripts for security research tools.

cut_img_php

Through JS and PHP to achieve the cutting position and size cutting without refresh upload pictures

cve

一个CVE漏洞预警知识库 no exp/poc

cve-2016-0051

BSoD PoC for CVE-2016-0051 (MS-016)

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v3.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious (Obfuscated) RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cvelist

dede_exp_collect

collection dedecms exp use pocsuite framework 收集织梦的一些漏洞，并用pocsuite框架写出利用程序。打造一键日dede

dexhunter

General Automatic Unpacking Tool for Android Dex Files

droidreverse

reverse engineering tools for android（android 逆向工程工具集）

enum4linux

A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

evalhook

Decoding a User Space Encoded PHP Script

exp

收集各种各样的exp

exp-for-python

平常收集的python小脚本程序

expdemo-javafx

图形化漏洞利用Demo-JavaFX版