_0xf4n9x_

CDGXStreamDeserRCE. 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用

Zentao-Captcha-RCE. 禅道研发项目管理系统`misc-captcha-user`认证绕过后台命令注入漏洞

CVE-2023-0669. CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.

CVE-2022-1388. CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

NPS-AUTH-BYPASS. NPS proxy server authentication bypasses vulnerability detection

CVE-2021-26084. CVE-2021-26084 Remote Code Execution on Confluence Servers

SonicWall_SSL-VPN_EXP. SonicWALL SSL-VPN Web Server Vulnerable Exploit

CVE-2022-46169. CVE-2022-46169 Cacti remote_agent.php Unauthenticated Command Injection.

CVE-2022-37042. CVE-2022-37042 Zimbra Auth Bypass leads to RCE

CVE-2022-24990. CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation

CVE-2021-3019. CVE-2021-3019 lanproxy目录遍历任意文件读取漏洞探测POC

DaHuaWPMSinitSessionRCE. 大华智慧园区综合管理平台initSession泄漏任意用户创建致使后台任意文件上传漏洞

0xf4n9x. About Me

ShiroMemShellAttack. Shiro利用与内存马安全学习及工具开发

SynergyKeyGenerate. Synergy and Serial Number Activation Key for SSL security

Digital-Privacy. 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗 (长期更新)

privacy. 个人数据泄漏检测网站，适用于 QQ / 京东 / 顺丰 / 微博。

CTF. Python

conkyrc. Lua

ShiroVulnEnv. Shiro漏洞环境

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

JavaThings. Share Things Related to Java - Java安全漫谈笔记相关内容

clash. A rule-based tunnel in Go.

xssplatform. 一个经典的XSS渗透管理平台

TFirewall. 防火墙出网探测工具,内网穿透型socks5代理

subfinder. Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

CVE-2021-21972. CVE-2021-21972

Course. 整理社团历次宣讲会的课件及文章推荐

BypassAV. Cobalt Strike插件，用于快速生成免杀的可执行文件

MiscSecNotes. some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building

xray-crack. xray社区高级版证书生成，支持到 1.2.0 版本

BlueLotus_XSSReceiver. XSS平台 CTF工具 Web安全工具