Pinned Repositories
activemq_Throwable
Apache ActiveMQ (版本 < 5.18.3) RCE
ActiveMqRCE
用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入
ADCSCoercePotato
aksk_tool
AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/执行命令，OSS/COS/S3管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等
As-Exploits
**蚁剑后渗透框架
AVKiller
利用图形化识别技术快速关闭目标机器上的杀毒软件
Awesome-POC
一个漏洞POC知识库
Be-a-Docker-Escaper
The container escape challenge of Be A RWCTFer competition (https://be-a-rwctfer.realworldctf.com/)
Beacon_Source
not a reverse-engineered version of the Cobalt Strike Beacon
expbox
Vulnerability Exploitation Code Collection Repository
Qlng's Repositories
Qlng/activemq_Throwable
Apache ActiveMQ (版本 < 5.18.3) RCE
Qlng/ActiveMqRCE
用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入
Qlng/ADCSCoercePotato
Qlng/Awesome-POC
一个漏洞POC知识库
Qlng/Be-a-Docker-Escaper
The container escape challenge of Be A RWCTFer competition (https://be-a-rwctfer.realworldctf.com/)
Qlng/Beacon_Source
not a reverse-engineered version of the Cobalt Strike Beacon
Qlng/Cobalt_Strike_wiki
Cobalt Strike系列
Qlng/connectwise-screenconnect_auth-bypass-add-user-poc
Qlng/CVE-2023-34039
VMWare Aria Operations for Networks (vRealize Network Insight) Static SSH key RCE (CVE-2023-34039)
Qlng/CVE-2023-3519
RCE exploit for CVE-2023-3519
Qlng/CVE-2023-36745
Qlng/cve-2023-36802
Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver
Qlng/CVE-2023-38035
Ivanti Sentry CVE-2023-38035
Qlng/CVE-2023-48788
Fortinet FortiClient EMS SQL Injection
Qlng/CVE-2024-0204
Authentication Bypass in GoAnywhere MFT
Qlng/CVE-2024-1086
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
Qlng/CVE-2024-21413
Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC
Qlng/CVE-2024-21413-
CVE-2024-21413 PoC for THM Lab
Qlng/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
Microsoft-Outlook-Remote-Code-Execution-Vulnerability
Qlng/cve-2024-21762-check
Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762
Qlng/CVE-2024-27130
PoC for CVE-2024-27130
Qlng/Databasetools
一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接
Qlng/Disable-TamperProtection
A POC to disable TamperProtection and other Defender / MDE components
Qlng/e0e1-wx
微信小程序辅助渗透-自动化
Qlng/no-defender
A slightly more fun way to disable windows defender. (through the WSC api)
Qlng/POC
收集整理漏洞EXp/POC,大部分漏洞来源网络，目前收集整理了700多个poc/exp，长期更新。
Qlng/Proxy-Attackchain
Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)
Qlng/SearchAvailableExe
寻找可利用的白文件
Qlng/Urldns
Qlng/wechat
微信收藏的文章