Pinned Repositories
-excel-
python excel处理作业
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
0x00sec_code
Code for my 0x00sec.org posts
1earn
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
2021_hv
2021_Hvv
2021 hw
2021hvv_vul
2021hvv漏洞汇总
2022-LPE-UAF
CVE-2022-2588
share
个人分享
werwolfz's Repositories
werwolfz/ArduinoCore-avr
The Official Arduino AVR core
werwolfz/attackRmi
werwolfz/BypassAVzzzz
This map lists the essential techniques to bypass anti-virus and EDR
werwolfz/CVE
一个CVE漏洞预警知识库 no exp/poc
werwolfz/CVE-2022-26923
A proof of concept exploiting CVE-2022-26923.
werwolfz/CVE-2023-22518
Exploit CVE-2023-22518
werwolfz/CVE-2023-22518-2-
Improper Authorization Vulnerability in Confluence Data Center and Server + bonus 🔥
werwolfz/CVE-2023-42819
CVE-2023-42819
werwolfz/f8x
红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
werwolfz/HackBrowserData
浏览器历史记录 账号密码导出-Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。
werwolfz/impacket
Impacket is a collection of Python classes for working with network protocols.
werwolfz/JavaSec
a rep for documenting my study, may be from 0 to 0.1
werwolfz/jwt_tool
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens
werwolfz/linux-exploit-suggester
Linux privilege escalation auditing tool
werwolfz/MDPOCS
猫蛋儿安全团队编写的poc能报就能打。企业微信、海康、Metabase、Openfire、泛微OA......
werwolfz/metarget
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
werwolfz/nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
werwolfz/nuclei-ai-extension
Nuclei AI - Browser Extension for Rapid Nuclei Template Generation
werwolfz/nuclei_gpt
Chat automates Nuclei template generation
werwolfz/RelayX
NTLM relay test.
werwolfz/sec_profile
爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
werwolfz/SecDictionary
实战沉淀字典
werwolfz/security-research
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
werwolfz/shadow-tls
A proxy to expose real tls handshake to the firewall
werwolfz/SharpDPAPI
SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
werwolfz/SmartBIAttackTool
SmartBI 登录代码逻辑漏洞导致的远程代码执行利用工具
werwolfz/suo5
一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool
werwolfz/traitor
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
werwolfz/VcenterKiller
一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接
werwolfz/ZhiShanGongFangAVV
免杀 推荐1