渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Top disclosed reports from HackerOne

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Java web common vulnerabilities and security code which is base on springboot and spring security

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Notes about attacking Jenkins servers

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Miscellaneous exploit code

Check your WAF before an attacker does

Redis(<=5.0.5) RCE

Getting started with java code auditing 代码审计入门的小项目

Automatic SSTI detection tool with interactive interface

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Penelope Shell Handler

spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧