ba0zi

ba0z1's repositories

ba0zi

Config files for my GitHub profile.

Language:HTML010

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

Language:GoGPL-2.0000

Chunk-Proxy

Language:Java000

cve-2020-0688

Language:Python010

CVE-2020-0787-EXP-ALL-WINDOWS-VERSION

Support ALL Windows Version

Language:C++NOASSERTION010

CVE-2022-0995

CVE-2022-0995 exploit

Language:C000

CVE-2022-39197

CobaltStrike <= 4.7.1 RCE

Language:Python000

DnfHelper-C

C++ 地下城与勇士-辅助

000

DnfHelper-Python

Python-地下城与勇士-dnf工具

Apache-2.0000

exchange-ssrf-rce

Language:Python010

follina.py

Quick POC to replicate the 'Follina' Office RCE vulnerability for local testing purposes

Language:Smarty000

goproxy

Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。

Language:GoGPL-3.0010

H

H是一款强大的资产收集管理平台

Language:CSS000

jackson-rce-via-spel

An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions

Language:Java010

Java

关于学习java安全的一些知识,正在学习中ing,欢迎fork and star

Language:Java000

javasec

自己学习java安全的一些总结，主要是安全审计相关

MIT000

JNDI-Inject-Exploit

解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入

Language:JavaMIT000

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

Language:GoGPL-3.0010