Juan Pablo Perata's repositories
CVE-2022-42889-text4shell
CVE-2022-42889 aka Text4Shell research & PoC
xss-finder
PoC tool to check if a URL is vulnerable to XSS
ctf-writeups
A series of many CTFs writeups made by me.
CVE-2021-44228-Apache-Log4j-Rce
Apache Log4j 远程代码执行
cve-2021-44228-rce-poc
A Remote Code Execution PoC for Log4Shell (CVE-2021-44228)
CVE-2022-1388_PoC
F5 BIG-IP RCE exploitation (CVE-2022-1388)
CVE-2022-22965-spring4shell
CVE-2022-22965 Spring4Shell research & PoC
CVE-2022-39952
POC for CVE-2022-39952
CVE-2022-40684
A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
local-spring-vuln-scanner
Simple local scanner for applications containing vulnerable Spring libraries
log4shell-vulnerable-app
Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.
owasp-mstg
The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
spring-core-rce
spring框架RCE漏洞 CVE-2022-22965
spring-spel-0day-poc
spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP
Spring4Shell-POC
Spring4Shell Proof Of Concept/Information
Spring4Shell-POC-1
Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit
spring4shell_vulnapp
Intentionally Vulnerable to Spring4Shell
SpringCore0day
SpringCore0day from https://share.vx-underground.org/
SpringShell
Spring Core RCE
VirusTotalC2
Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , and in case you don't have C2 infrastructure , now you have a free one
bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
CVE-2020-1472
Test tool for CVE-2020-1472 ZeroLogon
CVE-2023-25690-POC
CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.
cxzero.github.io
Personal website at https://cxzero.github.io
HTB-Business-CTF-2023-The-Great-Escape
Hackthebox Business CTF 2023- The Great Escape Writeups
htb-cyber-apocalypse-2024
Official writeups for Cyber Apocalypse CTF 2024: Hacker Royale
public-templates-htb
Templates for submissions