Miscellaneous exploit code

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Java web common vulnerabilities and security code which is base on springboot and spring security

Notes about attacking Jenkins servers

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

for mass exploiting

A framework for Backdoor development!

Redis(<=5.0.5) RCE

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

SambaCry exploit and vulnerable container (CVE-2017-7494)

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Another web vulnerabilities scanner, this extension works on Chrome and Opera

CVE-2020-0796 Remote Code Execution POC

Top disclosed reports from HackerOne

Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.

Getting started with java code auditing 代码审计入门的小项目

Redis 4.x/5.x RCE

Weblogic coherence.jar RCE

🛠 Tools and scripts to manipulate Android APKs

bluekeep exploit

thinkphp5 rce getshell

A social experiment

exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts

Simple Hacking tools

DDoor - cross platform backdoor using dns txt records

Some exploits, which I’ve created during my OSCE preparation.