dinosn

hikvision

Hikvision log4j PoC

CVE-2024-20931

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

synackDUO

Python Duo Push API

synack_burp

citrix_cve-2023-4966

Citrix CVE-2023-4966 from assetnote modified for parallel and file handling

weblogic

Weblogic exploits

ysoserial.net-docker

ysoserial.net docker image

avred

Analyse your malware to surgically obfuscate it

awesome-industrial-protocols

Security-oriented list of resources about industrial network protocols.

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

Caro-Kann

Encrypted shellcode Injection to avoid Kernel triggered memory scans

cs2br-bof

CVE-2022-33679

One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html

CVE-2022-36537

POC of CVE-2022-36537

CVE-2022-41040-metasploit-ProxyNotShell

the metasploit script(POC) about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery (SSRF) attack. An authenticated attacker can use the vulnerability to elevate privileges.

CVE-2023-46604

DonPAPI

Dumping DPAPI credz remotely

ExecIT

Execute shellcode files with rundll32

JNDI-Injection-Exploit-Plus

60+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

JNDI-Injection-LDAP-Deserialization

JNDIExploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

KubeStalk

KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.

LOLDrivers_finder

nanodump

The swiss army knife of LSASS dumping

Offensive-C-Sharp

redis_get

Get redis keys from open redis, or by using a password. This is to create a proof of concept to be used later in reports.

RichFaces

A collection of exploits created or modified by me

SeeYouCM-Thief

Weblogic-1

WebLogic vulnerability exploration from beginner to expert.

WeblogicEnvironment

WeblogicEnvironment docker setup for research