Mochizuki3310

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Web-CTF-Cheatsheet

Web CTF CheatSheet 🐈

avList

avList - 杀软进程对应杀软名称

Behinder

“冰蝎”动态二进制加密网站管理客户端

Black-Hat-Bash

The Black Hat Bash book repository

CVE-2022-1388-POC

An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell

CVE-2022-21907-http.sys

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

CVE-2022-30525POC

Proof of concept exploit for CVE-2022-30525 (Zxyel firewall command injection)

CVE-2023-27524

Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset

ESXiArgs-Recover

A tool to recover from ESXiArgs ransomware

Godzilla

哥斯拉

Hitomi-Downloader

:cake: Desktop utility to download images/videos/music/text from various websites, and more.

KellyC-Image-Downloader

Browser extension for batch downloading artworks from Pixiv, Pinterest, Twitter, DeviantArt and other sites.

kernel-exploit-factory

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

LocalPotato

MediaCreationTool.bat

Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!

mimikatz

A little tool to play with Windows security

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

PEzor

Open-Source Shellcode & PE Packer

PHP_exploits

Pwn stuff.

Quasar

Remote Administration Tool for Windows

RANSOMWARE-WANNACRY-2.0

Yes that's what you thinking

remote-method-guesser

Java RMI Vulnerability Scanner

S7_plus_Crash

Siemens SIMATIC vulnerabilities

scalpel

scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。 原理：https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

ubuntu-wsl2-systemd-script

Script to enable systemd support on current Ubuntu WSL2 images [Unsupported, no longer updated]

Windows10Exploits

Microsoft » Windows 10 : Security Vulnerabilities

ZZ-SOCMAP-CVE-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907