渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Top disclosed reports from HackerOne

Java web common vulnerabilities and security code which is base on springboot and spring security

Miscellaneous exploit code

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Notes about attacking Jenkins servers

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

向日葵 RCE

Redis(<=5.0.5) RCE

CVE-2020-0796 Remote Code Execution POC

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Check your WAF before an attacker does

Another web vulnerabilities scanner, this extension works on Chrome and Opera

for mass exploiting