[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.
☆176Oct 21, 2022Updated 4 years ago
Alternatives and similar repositories for ProxyVulns
Users that are interested in ProxyVulns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows活动目录中的LDAP信息收集工具☆234Oct 9, 2021Updated 5 years ago
- 这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。☆345May 22, 2023Updated 3 years ago
- 提取DC日志，快速获取域用户对应IP地址☆311Mar 21, 2022Updated 4 years ago
- Automatic ProxyShell Exploit☆115Sep 4, 2021Updated 5 years ago
- 影子用户 克隆☆231Dec 30, 2021Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。☆263Nov 25, 2022Updated 3 years ago
- Exchange2010 authorized RCE☆157Dec 24, 2020Updated 5 years ago
- weaponized tool for CVE-2020-17144☆158Dec 9, 2020Updated 5 years ago
- C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection☆247Mar 31, 2021Updated 5 years ago
- ProxyShell POC Exploit : Exchange Server RCE (ACL Bypass + EoP + Arbitrary File Write)☆324Mar 9, 2022Updated 4 years ago
- A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …☆270Oct 17, 2025Updated last year
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 5 years ago
- 帆软/致远密码解密工具☆362Jul 29, 2021Updated 5 years ago
- bypass BeaconEye☆88Sep 9, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 利用NTLM Hash读取Exchange邮件☆442Mar 23, 2026Updated 7 months ago
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 3 years ago
- 一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。☆289Mar 14, 2021Updated 5 years ago
- NTLM relay test.☆196Jun 26, 2025Updated last year
- JumpServer远程代码执行漏洞检测利用脚本☆202Feb 9, 2021Updated 5 years ago
- 内网渗透测试工具，弱密码爆破、信息收集和漏洞扫描☆611Jan 31, 2024Updated 2 years ago
- 一个能快速开启和关闭匿名SMB共享的红队脚本☆174Apr 6, 2022Updated 4 years ago
- VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS☆216Dec 1, 2021Updated 4 years ago
- Yet another SharpSphere☆228Aug 1, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 通过 Redis 主从写出无损文件☆717May 25, 2020Updated 6 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆758Apr 14, 2021Updated 5 years ago
- Bypass AV 用户添加☆166Dec 30, 2021Updated 4 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆166Apr 10, 2022Updated 4 years ago
- 内网域渗透小工具☆732Apr 20, 2021Updated 5 years ago
- 获取服务器或域控登录日志☆278Sep 8, 2023Updated 3 years ago
- Shiro-550 不依赖CC链利用工具☆447Jun 19, 2024Updated 2 years ago
- 利用 NTLMSSP 探测 Windows 信息☆173Aug 24, 2022Updated 4 years ago
- ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)☆185Oct 19, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE☆231Dec 5, 2020Updated 5 years ago
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆271Mar 4, 2022Updated 4 years ago
- ZipCreater主要应用于跨目录的文件上传漏洞的利用，它能够快速进行压缩包生成。☆184Apr 6, 2022Updated 4 years ago
- 替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆147Mar 13, 2022Updated 4 years ago
- Memshell☆300Dec 7, 2021Updated 4 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆367Jun 19, 2024Updated 2 years ago
- C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录，从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机☆428Jan 28, 2021Updated 5 years ago