Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances.
☆57Aug 22, 2026Updated last month
Alternatives and similar repositories for dsh2shell
Users that are interested in dsh2shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 面向授权环境的自动化资产测绘 + 漏洞扫描工具，基于原 dddd 的设计思路做现代化重写，覆盖指纹识别、弱口令、nuclei POC、Shiro 专项检测和 HTML 报告。☆32Updated this week
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆59Updated this week
- 面向 DeepSeek Harness（dsh）的渗透测试模式 @CloverSecLabs☆607Oct 9, 2026Updated last week
- AI agent build by D@wnEdg3☆18Sep 1, 2026Updated last month
- Repository for the TDS implementation in Rust.☆60Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- NextAnti is a browser extension focused on anti-honeypot and anti anti-honeypot techniques, NextAnti 是一款专门用于浏览器反蜜罐反反蜜罐（Anti-Honeypot）的插件，…☆38Jun 22, 2026Updated 3 months ago
- 《Re:从零开始的AI学习》配套 skills，每个 skill 有一期视频讲为什么。Companion skills for the Bilibili series.☆232Oct 10, 2026Updated last week
- CVE's for onlyoffice☆12Jun 19, 2023Updated 3 years ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆43Sep 9, 2026Updated last month
- 将传统的k8s攻击手法进行整合，融入cdk的相关exp，接入llm并提供attack接口完成k8s自动化渗透。☆31Jul 12, 2026Updated 3 months ago
- CVE-2026-75604 Next.js Windows RCE poc☆105Aug 28, 2026Updated last month
- A C++ reimplementation of a Java emulator for a certain anime game☆11Jan 24, 2023Updated 3 years ago
- A native macOS app that wraps the viaduct command-line tool in a graphical interface.☆38Sep 23, 2026Updated 3 weeks ago
- 批量暗链（违规信息）检测工具☆11Aug 26, 2020Updated 6 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- 一个轻量便捷的Arcaea B30分表☆12Mar 18, 2025Updated last year
- Hunting-Rabbit（猎兔）：致力于打造渗透测试全流程命令行工具，细化每个过程，让渗透测试的每个过程都看得见摸得着，防止遗漏资产，误报严重而丢失漏洞，同时源码很基础，对初学者有重要参考意义。☆12Jun 28, 2024Updated 2 years ago
- ToShell 是一个轻量 C2 框架，由 服务端（Team Server）+ Web 控制台 + 多平台植入端 组成，覆盖「生成载荷 → 会话管理 → 任务执行」的完整链路。单二进制即可部署整套服务，开箱即用。☆186Sep 28, 2026Updated 2 weeks ago
- Beacon Object File implementation of mimikatz leveraging the Process Hollowing technique☆41Jun 29, 2026Updated 3 months ago
- WindFtsy的WEB应用黑盒测试技能☆79Oct 8, 2026Updated last week
- Fastjson 1.2.68 ~ 1.2.83 RCE☆95Jul 27, 2026Updated 2 months ago
- RPC计划任务维权-过核晶☆14May 19, 2026Updated 4 months ago
- 域前置版本FRP☆17Nov 24, 2022Updated 3 years ago
- 用于渗透测试的WebFuzz扫描工具☆37Aug 3, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Unluac fork with support for miHoYo's variant of Lua☆19Jul 29, 2022Updated 4 years ago
- 对danbooru的角色词条和基础概念词条汉化☆10Mar 9, 2025Updated last year
- Oktos 是一款红队后渗透平台，作为 XRED.TEAM 的一部分。它采用了模块化设计，支持 BOF 动态加载、多信道异步通信与内存免杀，内置的 AI 助手可辅助编排或自动执行后渗透任务，为红队提供隐蔽、高效、智能的作战能力。☆196Updated this week
- Java Chains 插件编写 demo☆14Aug 9, 2026Updated 2 months ago
- 一个优雅美观的网络空间测绘平 台☆15Jul 2, 2025Updated last year
- 【Hello-CTF labs】一个ssrf的综合靶场，包含RCE，SQL注入，Tomcat，Redis，MySQL提权等ssrf攻击场景☆88Mar 18, 2025Updated last year
- 【NEW】https://github.com/ctfhub-team/base_web_nginx_mysql_php_56 https://github.com/ctfhub-team/base_web_nginx_mysql_php_74☆12Sep 22, 2020Updated 6 years ago
- Nacos下Spring-Cloud-Gateway CVE-2022-22947利用环境☆16Jun 25, 2022Updated 4 years ago
- 自动化 SRC 漏洞挖掘系统：FOFA 资产测绘 + LLM 多 worker 自主挖掘/审核/情报沉淀。Powered By StanleyNull☆492Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Patches adbd to allow `adb root`☆12Mar 14, 2018Updated 8 years ago
- DBX 数据审计版☆51Updated this week
- 自动化渗透测试框架。它结合了现代 AI 技术（RAG、ReAct）与传统安全工具，能够按照标准的渗透测试流程（信息收集 -> 漏洞探测 -> 漏洞利用 -> 权限维持 -> 横向移动）自动执行任务。☆17Mar 5, 2026Updated 7 months ago
- 【Hello-CTF labs】从0开始的原型链污染系列题目☆13Oct 7, 2024Updated 2 years ago
- 基于 Nonebot2，使用 AI 分析群聊记录，生成讨论内容的总结。☆18Dec 12, 2025Updated 10 months ago
- My presentation slides☆19Oct 31, 2025Updated 11 months ago
- MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and ra…☆68Aug 3, 2026Updated 2 months ago