N1k0la-T

CVE-2023-36745

CVE-2023-21707

CVE-2023-21707 EXP

DreamerCMS

DreamerCMS 漏洞环境

MIITSpider

域名备案爬虫

2022-HW-POC

2022 护网行动 POC 整理

clrmd

Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.

CVE-2023-32031

gost

GO Simple Tunnel - a simple tunnel written in golang

Java-Rce-Echo

Java RCE 回显测试代码

n1k0la-t.github.io

NacosRce

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

o2oa

开源OA系统 - 码云GVP|Java开源oa|企业OA办公平台|企业OA|协同办公OA|流程平台OA|O2OA|OA，支持国产麒麟操作系统和国产数据库（达梦、人大金仓），政务OA，军工信息化OA

PowerShell

PowerShell for every system!

pypsrp

PowerShell Remoting Protocol for Python

qq-tim-elevation

CVE-2023-34312

rogue_mysql_server

A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.

somefiles

SpringBootVulExploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

ysuserial