影响版本：
Usage
python3 CVE-2021-22205.py target "curl \`whoami\`.dnslog"
获取csrf-token：
通过 /users/sign_in 获取csrf-token 然后使用前面的 CVE-2021-22205 poc 进行构造上传包进行执行未经身份验证的上传请求，最终rce
ref:
YouTube Video Proof of Concept I created a new YouTube Video with technical Explanation for breaking Google's Audio reCAPTCHAs: Click on the image bel
genpyteal Converts Python to PyTeal. Your mileage will vary depending on how muc
What is a keylogger? A keylogger is a software application or piece of hardware that monitors and records keystrokes made on a computer keyboard. The
auto-derby 自动化养马 育成结果 Nurturing result 功能 支持客户端 DMM （前台） 实验性 安卓 ADB 连接（后台）开发基于 1080x1920 分辨率 团队赛 (Team race) 有胜利确定奖励时吃帕菲 日常赛 (Daily race) PvP 活动赛 (Cha
log4j-nullroute Quick script to ingest IP feed from greynoise.io for log4j (CVE-2021-44228) and null route bad addresses. Works w/Cisco IOS-XE and Ari
Threat-Broadcast 威胁情报播报 运行环境 项目介绍 从以下公开的威胁情报来源爬取并整合最新信息： 360：https://cert.360.cn/warning 奇安信：https://ti.qianxin.com/advisory/ 红后：https://redqueen.tj-u
DependConfusion-X Tool is written in Python3 which allows security researcher/bug bounty hunter to scan and monitor list of hosts for Dependency Confusion.
Binary check tool to identify command injection and format string vulnerabilities in blackbox binaries. Using xrefs to commonly injected and format string'd files, it will scan binaries faster than F
AutoTor Auto Tor Ip Changer for Linux! git clone https://github.com/Arest7/AutoTor cd AutoTor pip install -r requirements.txt python3 AutoTor.py follo
Let's Git - Versionsverwaltung & Open Source Hausaufgabe Herzlich Willkommen zu
Cookiecutter for rapidly developing new open source Python packages. Best practices with all the modern bells and whistles included.
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files tha
Heimdall Cloud Checker 🇧🇷 About Visius is a Brazilian cybersecurity startup that follows the signs of the crimson thunder ;) 🎸 ! As we value open s
yLog4j This is Y-Sec's @PortSwigger Burp Plugin for the Log4j CVE-2021-44228 vulnerability. The focus of yLog4j is to support mass-scanning of the Log
PyFUD fully Undetectable payload generator for metasploit Usage: pyfud.py --host
passwnd Check for breached passwords with k-anonymity Usage To get prompted to enter the password securely, simply run: passwnd.py Alternatively, you
hackinsta a program to hack instagram Yokoback_(instahack) is the file to open, you need libraries write on import. You run that file in the same fold
TTUN Server The self-hostable proxy tunnel. Running Running: docker run -e TUNNEL_DOMAIN=Your tunnel domain -e SECURE=True if using SSL ghcr.io/to
A forensic tool to make analysis of email headers easy to aid in the quick discovery of the attacker. Table of Contents About mailMeta Installation Us
CVE-2021-26084 CVE-2021-26084 Remote Code Execution on Confluence Servers. Dork Fofa: app="ATLASSIAN-Confluence" Usage Show help information. python P
153 Dec 20, 2022
9 Oct 19, 2022
7 Sep 19, 2022
376 Jan 01, 2023
5 Sep 12, 2022
148 Nov 09, 2022
4 Dec 21, 2021
3 Nov 16, 2021
3 Jan 23, 2022
1 Jan 24, 2022
177 Dec 22, 2022
213 Dec 30, 2022
48 Jun 20, 2022
1 Jan 31, 2022
3 Mar 25, 2022
1 Feb 08, 2022
1 Dec 04, 2021
2 Jan 11, 2022
59 Nov 26, 2022
63 Dec 30, 2022