Penetration_Testing_POC

Mirrors_BOOKS/Penetration_Testing_POC

Fork 0

mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2026-08-18 02:17:27 +08:00

Commit Graph

Select branches

Hide Pull Requests

copilot/add-anthropic-cybersecurity-link

copilot/add-appropriate-location-in-readme

copilot/add-bypasstamperplus-link

copilot/add-description-to-readme

copilot/add-github-repo-to-readme

copilot/add-link-to-thinkphpgui

copilot/add-links-to-repos

copilot/add-references-to-http2-bomb

copilot/add-shannon-to-readme

copilot/add-to-readme

copilot/add-vphone-aio-link-to-readme

copilot/organize-project-structure

copilot/task-18260135-198552685-4b066df0-1f25-4814-a29b-cbac265a34ca

copilot/update-books-directory-references

copilot/update-readme

copilot/update-readme-add-section

copilot/update-readme-again

copilot/update-readme-appropriate-location

copilot/update-readme-appropriate-location-again

copilot/update-readme-appropriate-section

copilot/update-readme-appropriate-section-again

copilot/update-readme-content

copilot/update-readme-content-again

copilot/update-readme-for-breachweave-and-adscan

copilot/update-readme-for-payloader

copilot/update-readme-for-webpack-extract

copilot/update-readme-linux-cve

copilot/update-readme-system-support

copilot/update-readme-to-add-projects

copilot/update-readme-with-cve-info

copilot/update-readme-with-github-link

copilot/update-readme-with-info

copilot/update-readme-with-info-again

copilot/update-readme-with-latest-commit

copilot/update-readme-with-link

copilot/update-readme-with-new-links

copilot/update-readme-with-podroid-link

copilot/update-readme-with-repo-link

copilot/update-readme-with-repo-link-again

copilot/update-readme-with-repo-url

copilot/update-readme-with-repository-links

copilot/update-readme-with-resources

copilot/update-readme-with-tool-information

copilot/update-readme-with-url

copilot/update-rss-commit-message

master

rss-automation

#10

#11

#12

#13

#14

#15

#17

#18

#19

#25

#26

#27

#29

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#65

#66

#68

#69

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#80

#83

#84

#9

394426a532 docs: 更新 1 篇文章 - 普华PowerPMS /Plan/BatchHandleFeedBackRecord 鉴权绕过漏洞 [skip ci] master github-actions[bot] 2026-08-16 09:32:15 +00:00
1a3b17d78f Add ragflow-audit (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286) to Web APP section (#84)
Copilot Mr-xncopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2026-08-11 08:36:24 -04:00
2c4bccefd2 Add SnowEyes Chrome extension (sensitive info detection) to tools section copilot/update-readme-with-latest-commit copilot-swe-agent[bot]andMr-xn 2026-08-11 12:34:23 +00:00
64cec67304 Add ragflow-audit (CVE-2026-28797/CVE-2026-24770/CVE-2025-69286) to Web APP section copilot-swe-agent[bot]andMr-xn 2026-08-11 12:25:10 +00:00
e55c7579f7 docs: append new books references to README 文章/书籍/教程相关 section copilot-swe-agent[bot]andMr-xn 2026-08-11 11:59:15 +00:00
1933ebcf55 Add files via upload 东方有鱼名为咸 2026-08-11 07:52:33 -04:00
68da8bcaf4 Update README.md 东方有鱼名为咸 2026-08-09 08:14:02 -04:00
de0479d279 docs: 更新 1 篇文章 - 用友GRP-U8Cloud产品jmreport组件模块Freemarker模板SSTI致RCE漏洞分析 [skip ci] github-actions[bot] 2026-08-09 07:04:13 +00:00
7432ea5857 add latest books to README 文章/书籍/教程相关 section (#83)
Copilotcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Mr-xn
2026-08-08 05:47:08 -04:00
dc2f52e083 add latest books to README 文章/书籍/教程相关 section copilot/update-books-directory-references copilot-swe-agent[bot]andMr-xn 2026-08-08 09:42:49 +00:00
65f92010d5 Add files via upload 东方有鱼名为咸 2026-08-08 05:37:20 -04:00
55a052353d Add files via upload 东方有鱼名为咸 2026-08-08 01:05:02 -04:00
8dd4bd1172 Add new resources and links in README 东方有鱼名为咸 2026-08-02 03:02:44 -04:00
6602db5059 Add files via upload 东方有鱼名为咸 2026-08-02 02:59:00 -04:00
0d4818c01b Update FastJson2 section in README 东方有鱼名为咸 2026-08-02 01:59:24 -04:00
210458c6cf Add files via upload 东方有鱼名为咸 2026-08-02 01:57:59 -04:00
d7190f28b4 Add files via upload 东方有鱼名为咸 2026-08-02 00:21:13 -04:00
d492180482 Remove FastJson2 RCE analysis entry from README 东方有鱼名为咸 2026-08-01 10:45:44 -04:00
7bde93dbb1 add FastJson2 Hash 碰撞 RCE 分析与复现东方有鱼名为咸 2026-08-01 10:42:05 -04:00
08be292dfd Fix typos in vulnerability links in README.md 东方有鱼名为咸 2026-08-01 06:17:08 -04:00
ef683709d3 docs: 更新 1 篇文章 - 金和OA C6 PlanGiveOut.aspx SQL注入漏洞+越权访问IDOR漏洞+XSS漏洞 [skip ci] github-actions[bot] 2026-07-30 02:46:32 +00:00
bc8c6ce29b docs: 更新 1 篇文章 - 用友U8Cloud extsystem.dst 接口SQL注入漏洞 [skip ci] github-actions[bot] 2026-07-27 03:38:34 +00:00
170547ef4d add 【Windows提取】CVE-2026-54121：利用 Certighost 漏洞伪造域控（Domain Controller）的证书，从而获得域控级别的 Kerberos 身份，最终实现完全接管整个 Active Directory 域东方有鱼名为咸 2026-07-25 00:29:46 -04:00
189289e3e5 add RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0 东方有鱼名为咸 2026-07-23 09:24:50 -04:00
d32962f55e docs: 更新 1 篇文章 - Fastjson 1.2.83 默认配置下的远程代码执行RCE [skip ci] github-actions[bot] 2026-07-20 16:28:01 +00:00
31091afe00 add Fastjson 1.2.68-1.2.83 版本默认配置在特定场景下的反序列化RCE实现东方有鱼名为咸 2026-07-20 12:24:04 -04:00
61571b66d6 Update README.md 东方有鱼名为咸 2026-07-18 22:24:14 -04:00
bdef3cd74d add wp2shell + lab 东方有鱼名为咸 2026-07-18 11:12:27 -04:00
70ddd575be update wp2shell scripts 东方有鱼名为咸 2026-07-18 06:26:04 -04:00
6fb2c3e945 add CVE-2026-63030 + CVE-2026-60137: pre-authentication SQL injection in WordPress core via REST batch-route confusion. 东方有鱼名为咸 2026-07-18 06:09:40 -04:00
4686235f11 docs: 更新 1 篇文章 - 用友U8Cloud XChangeServlet SQL注入漏洞+XXE漏洞 [skip ci] github-actions[bot] 2026-07-16 14:05:54 +00:00
1ba941cd85 Add Upload_Auto_Fuzz tool description to README 东方有鱼名为咸 2026-07-15 09:10:34 -04:00
8b90213e11 add 【Linux提权】 CVE‑2026‑46242（Bad Epoll）东方有鱼名为咸 2026-07-05 14:30:31 +08:00
9b887ce364 Bump requests in /vuln_pocs/exploit-tools/tp5-getshell (#79) dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 2026-07-05 13:06:00 +08:00
29ff1f0c29 Add Darkmoon (#80) Mehdi BOUTAYEB 2026-07-05 07:05:23 +02:00
6693085677 Consolidate scattered CVE/exploit dirs and restore Markdown link format in README (#78) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-07-04 15:42:15 +08:00
cc39375aec fix: revert README links from HTML anchors back to Markdown format copilot/task-18260135-198552685-4b066df0-1f25-4814-a29b-cbac265a34ca copilot-swe-agent[bot] 2026-07-04 07:05:30 +00:00
8612a6ee28 chore: consolidate CVE and exploit directories and update README links copilot-swe-agent[bot] 2026-07-04 06:55:51 +00:00
5162375b66 Add files via upload 东方有鱼名为咸 2026-06-28 21:12:11 +08:00
71a8cd50b2 add 添加两款OSINT 工具sherlock和Aliens_eye 东方有鱼名为咸 2026-06-28 19:22:56 +08:00
87fce1581b add NebulaPulsar:一个 Java/C# WebShell 漏洞利用与植入工具，作为 Alien 项目的概念验证（PoC），适用于安全研究与漏洞利用实验。东方有鱼名为咸 2026-06-28 19:01:52 +08:00
aad3c030a1 add jadx-ai-mcp：为 Jadx 提供 MCP 扩展，使 AI 工具能够直接调用本地 Jadx 进行 APK/DEX 反编译、搜索与分析，是构建 AI 驱动逆向工作流的关键组件。东方有鱼名为咸 2026-06-28 18:58:52 +08:00
95fbc64849 add freellmapi：一个免费 LLM API 聚合服务，提供兼容 OpenAI 的统一接口，可无缝调用多个免费大模型，非常适合个人项目、教学和快速原型开发。东方有鱼名为咸 2026-06-28 18:54:08 +08:00
8b378b17e8 add 【Linux提权】CVE‑2026‑46331:packet_edit_meme 东方有鱼名为咸 2026-06-28 18:49:39 +08:00
622927a01f add reverse-skill 一个面向逆向工程、渗透测试和安全研究的技能路由包，支持 AI 编码助手自动选择合适的工作流和工具链，涵盖 APK、二进制、JS、CTF 等场景。东方有鱼名为咸 2026-06-28 12:06:43 +08:00
4023534e16 add Linux提权】CVE-2026-43503：（DirtyClone）东方有鱼名为咸 2026-06-27 16:27:56 +08:00
4e4cc626d8 RootHawk：整合多种已公开本地提权漏洞（如 Dirty Pipe、PwnKit、Polkit 3560 等）的一键化 Linux 提权检测与利用工具。东方有鱼名为咸 2026-06-27 10:31:57 +08:00
e0be4cbe8f docs: 更新 1 篇文章 - LiteLLM v1.84.0 安全漏洞完整分析报告 [skip ci] github-actions[bot] 2026-06-23 15:13:26 +00:00
f272eddfd7 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 admin/Upload/upload 文件上传漏洞 [skip ci] github-actions[bot] 2026-06-18 04:39:59 +00:00
b65bff0d09 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 admin/secret/edit SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-17 04:46:01 +00:00
28b86725d2 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 clearUserDevice SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-16 05:01:18 +00:00
59a9430855 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 downloadSharedFile 任意文件读取漏洞 [skip ci] github-actions[bot] 2026-06-15 05:01:01 +00:00
e36ed50007 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 getFileTrueAddress SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-14 04:46:07 +00:00
2f610f2513 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 Pan/Upload/upload 文件上传漏洞 [skip ci] github-actions[bot] 2026-06-13 04:18:37 +00:00
9c933719f8 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 uploadMultipleFile 任意文件上传漏洞 [skip ci] github-actions[bot] 2026-06-12 04:39:43 +00:00
9ec7b9ce02 Add BishopFox CVE-2026-34908-check to README.md (#77) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-11 20:56:28 +08:00
5a7723acc1 Add BishopFox CVE-2026-34908-check to README.md under IOT Device&Mobile Phone section copilot/update-readme-with-github-link copilot-swe-agent[bot] 2026-06-11 12:49:32 +00:00
6a9725464d docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 user_expire_post SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-11 04:27:10 +00:00
95ac8abfd0 Differentiate FineReportExploit implementations (Go vs Python) in README.md copilot-swe-agent[bot] 2026-06-10 13:03:43 +00:00
5ae622b2c8 Differentiate Drun1baby/FineReportExploit as Python tool next to Go tool in README.md copilot-swe-agent[bot] 2026-06-10 13:02:51 +00:00
e6d1993e0c Add Drun1baby/FineReportExploit to README.md next to existing FineReportExploit link copilot-swe-agent[bot] 2026-06-10 13:02:10 +00:00
e57bca1701 Add Anthropic-Cybersecurity-Skills to README.md under tools section (#76) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-10 20:56:04 +08:00
65e288a942 Add Anthropic-Cybersecurity-Skills to README.md under tools section copilot/add-anthropic-cybersecurity-link copilot-swe-agent[bot] 2026-06-10 11:57:05 +00:00
5255cfaefe docs: 更新 1 篇文章 - 孚盟云CRM ProductDetail.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-10 04:14:20 +00:00
4ef08e6b75 docs: 更新 1 篇文章 - 孚盟云CRM ProviderList.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-09 04:02:54 +00:00
0e08d7c027 docs: add GitHub PoC link for CVE-2026-8054 (#75) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-09 11:38:56 +08:00
cfac1542e3 docs: add GitHub PoC link for CVE-2026-8054 copilot/update-readme-again copilot-swe-agent[bot] 2026-06-09 03:37:02 +00:00
a0ab651bdd docs: 更新 1 篇文章 - CVE-2026-8054 高危前台无需认证 SQL 注入漏洞（Pre-auth SQL Injection）分析复现 [skip ci] github-actions[bot] 2026-06-08 20:34:30 +00:00
ab653515bb Add LuaN1aoAgent cognitive AI pentesting agent to tools list (#74) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-08 21:07:07 +08:00
ec21af77d2 add LuaN1aoAgent to README.md in tools section copilot/update-readme-for-breachweave-and-adscan copilot-swe-agent[bot] 2026-06-08 12:57:29 +00:00
ff0f85510f docs: add BreachWeave and adscan to README.md copilot-swe-agent[bot] 2026-06-08 12:44:36 +00:00
8351d32c25 docs: 更新 1 篇文章 - 孚盟云CRM ProductSelect.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-08 04:41:59 +00:00
327e686ce8 docs: 更新 1 篇文章 - 孚盟云CRM ProductDetail.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-07 04:26:11 +00:00
038c80db76 Add Nginx HTTP/2 Bomb Exploit links to README.md (#73) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-06 12:52:16 +08:00
f768686332 Add Nginx HTTP/2 Bomb Exploit links to README.md copilot/add-references-to-http2-bomb copilot-swe-agent[bot] 2026-06-06 04:36:36 +00:00
6189766487 docs: 更新 1 篇文章 - 孚盟云CRM Product_field.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-06 03:59:46 +00:00
32e3427fec docs: 更新 1 篇文章 - 孚盟云CRM ProductList.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-05 04:17:05 +00:00
7460fb4b76 Add AssppJailbroken to IOT Device&Mobile Phone section in README.md (#72) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-04 23:55:50 +08:00
755ef1af59 Add AssppJailbroken to IOT Device&Mobile Phone section in README.md copilot/update-readme-with-info-again copilot-swe-agent[bot] 2026-06-04 15:44:10 +00:00
e62e6ea23d Add AgonySec/ThinkPHPGUI to README tools section (#71) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-04 22:20:16 +08:00
c4fa6c0c34 Update ThinkPHPGUI entry in README.md with consistent capitalization copilot/add-link-to-thinkphpgui copilot-swe-agent[bot] 2026-06-04 14:14:00 +00:00
7970a47afc Add AgonySec/ThinkPHPGUI to README.md at line 1940 copilot-swe-agent[bot] 2026-06-04 14:12:27 +00:00
740254cca5 docs: 更新 1 篇文章 - 孚盟云CRM AjaxProductList.ashx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-04 04:42:49 +00:00
c0807ebc57 docs: 更新 1 篇文章 - 孚盟云CRM ProductGrid.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-03 04:48:23 +00:00
9d29d150c5 docs: 更新 1 篇文章 - 孚盟云CRM Price_detail.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-02 11:51:29 +00:00
fcdbf59471 docs: add PrismSpace link to README (#70) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-06-01 21:56:10 +08:00
3f2cbeb8bf docs: add PrismSpace link to README copilot/update-readme copilot-swe-agent[bot] 2026-06-01 13:53:55 +00:00
68be5653c5 docs: 更新 1 篇文章 - 孚盟云CRM Inquiry.aspx SQL注入漏洞 [skip ci] github-actions[bot] 2026-06-01 04:50:49 +00:00
a6d696d4d2 docs: 更新 1 篇文章 - 孚盟云CRM LoadMailAttachFile.aspx 任意文件读取/移动 [skip ci] github-actions[bot] 2026-05-31 04:21:31 +00:00
db7fbca5ab Bump urllib3 from 1.26.5 to 2.7.0 in /discuz-ml-rce (#61) dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 2026-05-29 11:51:50 +08:00
65db36acea docs: add TongWeb exploit and plugin links to README (#69) Copilotandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> 2026-05-29 11:51:18 +08:00
cbac06d7e4 docs: add TongWeb exploit and plugin links to README copilot/update-readme-to-add-projects copilot-swe-agent[bot] 2026-05-29 03:49:02 +00:00
68fff2a2db Add CIFSwitch link to Linux privilege escalation section in README (#68) Copilot 2026-05-29 10:15:36 +08:00
5fe086677f Add CIFSwitch link to Linux privilege escalation section in README copilot/add-to-readme copilot-swe-agent[bot] 2026-05-29 01:52:00 +00:00
ad9d7a3adc docs: add Copy-Fail Kubernetes PoC link to CVE-2026-31431 entries (#66)
Copilotcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Mr-xn
2026-05-25 16:17:25 +08:00
177ca854ae docs: add Copy-Fail Kubernetes PoC link to CVE-2026-31431 entries copilot/update-readme-with-cve-info copilot-swe-agent[bot]andMr-xn 2026-05-25 08:14:54 +00:00
87cce6fcf9 Add CACM (Linux权限维持+后渗透工具) to 提权辅助相关 section in README.md (#65)
Copilotcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Mr-xn
2026-05-23 08:31:34 +08:00
0bad5c213c Add CACM (Linux权限维持+后渗透工具) to 提权辅助相关 section in README.md copilot/update-readme-with-repo-link-again copilot-swe-agent[bot]andMr-xn 2026-05-23 00:28:21 +00:00
12ce4a2f7b docs: 更新 1 篇文章 - 用友 NC 系统 IMsgCenterWebService SQL注入漏洞 [skip ci] github-actions[bot] 2026-05-18 04:11:16 +00:00
05eeb7c991 docs: add zenproxy link to proxy tools list (#63)
Copilotcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Mr-xn
2026-05-17 10:38:18 +08:00

1 2 3 4 5 ...