渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Gather and update all available and newest CVEs with their PoC.

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

基于Burp插件开发打造渗透测试自动化

漏洞文库 wiki.wy876.cn

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

fastjson漏洞批量检测工具

A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.

Uses python3.10, Debian, python-Nmap, OpenaAI, and flask framework to create a Nmap API that can do scans with a good speed online and is easy to deploy. This is a implementation for our college PCL project which is still under development and constantly updating.

PoC - Exploit Delivery via Steganography and Polyglots, CVE-2014-0282

K8博客 k8gege.org

Poc Collected for study and develop

A Service Mesh proof of concept where we compare three prominent Cloud Native products

Atlassian Companion RCE Vulnerability Proof of Concept

👻 [PoC] CSV+ 0.8.0 - Arbitrary Code Execution (CVE-2022-21241)

xRay is a fairly powerful scanner that will allow you to scan and scout targets

PoC ActiveX SVG Document Execution

An experimental Apple TV implementation using HTML, CSS, and JavaScript.