Al1ex

Pentest-tools

Intranet penetration tools

WindowsElevation

Windows Elevation(持续更新)

LinuxEelvation

Linux Eelvation(持续更新)

CVE-2021-22205

CVE-2021-22205& GitLab CE/EE RCE

CVE-2022-0847

CVE-2022-0847

CVE-2021-27928

CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST RCE

Hadoop-Yarn-ResourceManager-RCE

Hadoop Yan ResourceManager unauthorized RCE

HW-2023

HW-POC

BlockChainSec

BlockChain Security

MysqlHoneypot

MysqlHoneypot

Pentest-Command

Pentest-Command

0DayList

0DayList

Alibab-Nacos-Unauthorized-Login

Alibab Nacos Unauthorized Login

CVE-2017-16995

CVE-2017-16995（Ubuntu本地提权漏洞）

CheckPWD

Check the default pwd of product via checklist.

CVE-2020-10673

CVE-2020-10673:jackson-databind RCE

RDPLinkEnum

RDPLinkEnum

CVE-2019-12814

CVE-2019-12814:Jackson JDOM XSLTransformer Gadget

Alibab-Nacos-Unauthorized-Reset-PWD

Alibab-Nacos-Unauthorized-Reset PWD

BlockChainConstruction

BlockChain Security Construction

CVE-2020-11113

CVE-2020-11113:Jackson-databind RCE

CVE-2021-4034

Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

CVE-2017-17485

CVE-2017-17485:Jackson-databind RCE

Al1ex

CVE-2019-12086

jackson unserialize

CVE-2020-14195

This is a simple test for FasterXML jackson-databind

CVE-2020-24750

CVE-2020-24750

JavaDeRe

Class to base64 String，base64 String to class

Mysql-Readfile

Mysql-Readfile