基于向日葵RCE的本地权限提升,无需指定端口
☆210Feb 24, 2022Updated 4 years ago
Alternatives and similar repositories for CNVD-2022-10270-LPE
Users that are interested in CNVD-2022-10270-LPE are comparing it to the libraries listed below
Sorting:
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆342Mar 6, 2022Updated 4 years ago
- Xshell全版本密码恢复工具☆930Jun 8, 2023Updated 2 years ago
- 冰蝎 哥斯拉 WebShell bypass☆763Jan 15, 2026Updated last month
- 数据库综合利用工具☆544Feb 16, 2022Updated 4 years ago
- FinalShellDecodePass 加密解密☆83Dec 1, 2021Updated 4 years ago
- 域控安全one for all☆736Sep 9, 2024Updated last year
- 帆软/致远密码解密工具☆359Jul 29, 2021Updated 4 years ago
- 一个能快速开启和关闭匿名SMB共享的红队脚本☆174Apr 6, 2022Updated 3 years ago
- 冰蝎Java WebShell自动化免杀生成☆782Mar 15, 2022Updated 3 years ago
- windows 添加管理员--Rust版本☆45Jul 7, 2022Updated 3 years ago
- CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等,解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计☆286Mar 19, 2022Updated 3 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆769Jan 26, 2022Updated 4 years ago
- 泛微OA_V9全版本的SQL远程代码执行漏洞☆157Apr 20, 2022Updated 3 years ago
- Bypass AV 用户添加☆169Dec 30, 2021Updated 4 years ago
- 适合在命令行中使用的轻巧的SQL Server数据库安全检测工具☆431Oct 23, 2021Updated 4 years ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆450Jun 14, 2022Updated 3 years ago
- vhost password decrypt☆262Oct 9, 2024Updated last year
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践☆230Aug 8, 2023Updated 2 years ago
- 一款针对向日葵的识别码和验证码提取工具☆922Nov 1, 2021Updated 4 years ago
- 强制关闭360 需要管理员权限☆170Feb 6, 2022Updated 4 years ago
- 基于Java实现的Shellcode加载器☆414Sep 4, 2023Updated 2 years ago
- A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations M…☆209Jan 24, 2022Updated 4 years ago
- 禅道相关poc☆172Jun 20, 2024Updated last year
- fastjson不出网利用、c3p0☆256Jul 30, 2021Updated 4 years ago
- SpringBoot Actuator未授权自动化利用,支持信息泄漏/RCE☆230Dec 5, 2020Updated 5 years ago
- SharpSQLTools 和@Rcoil一起写的小工具,可上传下载文件,xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。☆964Aug 5, 2021Updated 4 years ago
- 将shellcode用rsa加密并动态编译exe,自带几种反沙箱技术。☆521Jul 9, 2020Updated 5 years ago
- 拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马,支持注入CMD内存马和冰蝎内存马☆510Aug 31, 2022Updated 3 years ago
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。☆456Aug 20, 2025Updated 6 months ago
- Lateral movement☆943Feb 28, 2026Updated last week
- 用CSharp写的一款信息搜集工具,目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密☆250Aug 26, 2020Updated 5 years ago
- 通达OA综合利用工具☆516Mar 17, 2021Updated 4 years ago
- rmi打内存马工具,适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 2 years ago
- exchange-ssrf-rce☆78Mar 14, 2021Updated 4 years ago
- AK资源管理工具,阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret,利用AK获取资源信息和操作资源,ECS/CVM/E2/UHOST/ECI/BCC执行命令,OSS/COS/S3/BOS…☆779Feb 13, 2025Updated last year
- golang打包二进制进行免杀☆234Apr 7, 2021Updated 4 years ago
- JetBrains系列产品.idea钓鱼反制红队☆330Jan 27, 2026Updated last month