51pwn

spring-spel-0day-poc. spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

CVE-2020-2551. how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

CVE_2020_2546. CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc python3,

MyDocs. 各种乱七八糟的收集, 51pwn.com大数据平台模糊查询

golang-RCE-0day-POC. golang RCE 0day POC

ComfyUI-workflows. ComfyUI workflows,ComfyUI 工作流合集,ComfyUI workflows collection

hackerToolsApp. hacker Tools cross-platform desktop App, support windows/MacOS/LInux ....

bug-bounty. bounty collection

51Pwn-Platform. 51Pwn Platform，为黑客而生的大数据搜索引擎，Big data search engine born for hackers

log4j-scan. A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

blackIps. black Ip lists, dorks-collection

vscan. 分支出了些问题，无法合并到main，迁移至https://github.com/hktalent/scan4all

MTX_HackerTools. Java

CVE-2021-40865. CVE-2021-40865

weblogic_java_des. weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory

afterLoader. 冰蝎客户端源码

autoMITM. auto MITM attack tools

0day. 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

Scan4all_Pro. Scan4all Pro，Distributed, more optimized and faster

awesomes. awesome、python、C++、linux、database、php、sql、penetration、security、infosec、javascript、tips...

Hack-Tools. Refactoring for 51pwn online

InternalAllTheThings. HTML

VcenterKiller. 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

WS-Attacker. WS-Attacker is a modular framework for web services Security penetration testing.

dht. BitTorrent DHT Protocol && DHT Spider，faster than shiyanhui/dht

AiCSA_pub. AiCSA，Move to https://github.com/hktalent/AiCSA

reverseShell. reverse Shell

ChatGPT-API. OpenAI ChatGPT, GPT-3, ChatGPT-API for go,ChatGPT in bash shell command line

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

tlsx. tlsx, default shodan top 10 https port, support push log to bigdb

exploit-poc. https://exploit-poc.com

rsse. 阿里云盘、夸克云盘等云盘搜索引擎

online-Hack-Tools. 51pwn online Hack Tools,

goHackTools. Go

EHole. EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

ip2domain. ip2domain

odat-docker. ODAT: Oracle Database Attacking Tool docker

51pwnApp. 51pwn App,scan4all desktop app, rust,p2p-chat

myapp. web app,web Microservices，Distributed service,Distributed web service

hktalent.github.io. https://51pwn.com

Venom. Venom shellcode SSA-RedTeam

proxypool. Golang实现的IP代理池

colly. Elegant Scraper and Crawler Framework for Golang

CVE-2022-21350. Java

distributed-kv. distributed key-value

ysoserial-y4er. ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。