Pinned Repositories
Axis-1.4-RCE-Poc
Axis <=1.4 远程命令执行（RCE） POC
bypassAV
借助Win-PS2EXE项目编写cna脚本方便快速生成免杀可执行文件
codeql
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise
h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
impacket
Impacket is a collection of Python classes for working with network protocols.
Middleware-Vulnerability-detection
CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15
nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
PeiQi-WIKI-POC
鹿不在侧，鲸不予游🐋
php_bugs
PHP代码审计分段讲解
POC-EXP
Collecting and writing PoC or EXP for vulnerabilities on some application
badguy0827's Repositories
badguy0827/h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
badguy0827/Middleware-Vulnerability-detection
CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15
badguy0827/nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
badguy0827/PeiQi-WIKI-POC
鹿不在侧，鲸不予游🐋
badguy0827/php_bugs
PHP代码审计分段讲解
badguy0827/POC-EXP
Collecting and writing PoC or EXP for vulnerabilities on some application
badguy0827/PocList
Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE
badguy0827/RedTeamTools
记录自己编写、修改的部分工具
badguy0827/saucerframe
python3批量poc检测工具
badguy0827/SecondaryDevCobaltStrike
二次开发过后的CobaltStrike,版本为4.1.在原来CobaltStrike的基础上修改多处特征,解决流量查杀问题.
badguy0827/SpringBootVulExploit
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
badguy0827/Voyager
一个安全工具集合平台，用来提高乙方安全人员的工作效率，请勿用于非法项目
badguy0827/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
badguy0827/webshell
免杀webshell生成工具
badguy0827/webshell-venom
免杀webshell无限生成工具
badguy0827/yongyou_nc_poc
badguy0827/as_webshell_venom
免杀webshell无限生成工具蚁剑版
badguy0827/black-hat-go
《Black.Hat.Go》中文翻译
badguy0827/BrowserGhost
这是一个抓取浏览器密码的工具，后续会添加更多功能
badguy0827/bypass-av-note
免杀技术大杂烩---乱拳也打不死老师傅
badguy0827/CVE-2020-15148-bypasses
几条关于CVE-2020-15148（yii2反序列化）的绕过
badguy0827/CVE-2021-25641-Proof-of-Concept
Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Different Gadgets
badguy0827/GetIPinfo
用于寻找多网卡主机方便内网跨网段渗透避免瞎打找不到核心网
badguy0827/go-shadowsocks2
Modern Shadowsocks in Go
badguy0827/Invoke-Obfuscation
PowerShell Obfuscator
badguy0827/JSP-Webshells
Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
badguy0827/Micro8
Gitbook
badguy0827/POChouse
POC&EXP仓库、hvv弹药库、Nday、1day
badguy0827/smbms
B站【遇见狂神说】JavaWeb项目【超市订单管理系统】
badguy0827/xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。