payload · GitHub Topics | GitHub 中文社区

PayloadsAllTheThings

Swissky@swisskyrepo

#夺旗赛 (CTF) 和网络安全资源#该仓库整理了Web安全相关攻击示例代码和资源

pentest payload bypass Web app Hacking vulnerability bounty methodology privilege-escalation penetration-testing

Python62.07 k

19 天前

payload

@payloadcms

使用TypeScript, Node.js, React and MongoDB开发的Headless CMS系统

headless-cms 内容管理系统 Express GraphQL React payload Node.js TypeScript JavaScript MongoDB headless mit-license Open Source payloadcms Jamstack PostgreSQL Next

TypeScript30.46 k

1 小时前

AllAboutBugBounty

@daffainfo

这些是我从各种渠道收集的bug bounty笔记

Bug Bounty bugbountytips bypass payloads reconnaissance bug Hacking Security payload penetration-testing

5.91 k

1 年前

AwesomeXSS

Somdev Sangwan@s0md3v

Awesome XSS stuff

翻译 - 很棒的XSS东西

xss payload xss-payloads payload-list xss-detection xss-cheatsheet

JavaScript4.8 k

2 个月前

CHAOS

Tiago Rodrigo Lampert@tiagorlampert

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

翻译 - ：fire：CHAOS是一个PoC，它可以生成有效负载并控制远程操作系统。

Go payload remote-control hacking-tool Hacking chaos

Go2.39 k

2 个月前

Medusa

@Ascotbe

🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

poc exp scanner payload Common Vulnerabilities and Exposures (CVE)

Python2.16 k

10 个月前

ezXSS

@ssl

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

翻译 - ezXSS是渗透测试人员和漏洞赏金猎人测试（盲目）跨站点脚本的一种简便方法。

payload xss blind Testing xss-vulnerability xss-exploitation xss-detection xss-attacks xss-injection

PHP1.94 k

6 天前

java-memshell-generator

@pen4uin

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

memshell webshell payload rce Java

Java1.72 k

1 个月前

Attiny85

@MTK911

RubberDucky like payloads for DigiSpark Attiny85

翻译 - RubberDucky 喜欢 DigiSpark Attiny85 的有效载荷

uac-bypass digispark digispark-scripts attiny85 rubberducky payload hid-injection hid-attacks Arduino pentesting

C++1.45 k

1 年前

Brutal

@screetsec

Payload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy . Brutal is a toolkit to quickly create various payload,powers...

usb rubberducky penetration penetration-testing hacker Hacking powershell-attack payload Arduino badusb

C++1.12 k

5 年前

AboutSecurity

@ffffffff0x

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

payload Security dictionary fuzz pentest Hacking redteam bounty cheatsheet bypass

HTML987

2 年前

Burp-Suite-Certified-Practitioner-Exam-Study

@botesjuan

Burp Suite Certified Practitioner Exam Study

payload pentesting vulnerability xss bscp burp portswigger

Python949

20 天前

CVE-2021-44228-PoC-log4j-bypass-words

@Puliczek

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

翻译 - 🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java 漏洞利用 - 绕过单词阻塞补丁的技巧

Security Exploit log4j Hacking Cybersecurity writeups Bug Bounty Common Vulnerabilities and Exposures (CVE)pentest payload

Java933

3 年前

Payloads

@sh377c0d3

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

翻译 - 渗透测试仪和Bug赏金猎人的有效负载库

bugbounty-tool Bug Bounty payload payloads payloads-database penetration-testing

PHP895

2 年前

TerraLdr

@NUL0x4C

A Payload Loader Designed With Advanced Evasion Features

payload edrs loader

C502

2 年前

java-echo-generator

@pen4uin

一款支持高度自定义的 Java 回显载荷生成工具

Java payload rce

Java329

7 个月前

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

@Puliczek

🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337

Security Exploit Hacking Cybersecurity writeups Bug Bounty Common Vulnerabilities and Exposures (CVE)pentest payload red-team

HTML322

2 年前

Picklock_RCM

@Slluxx

Nintendo Switch encryption key derivation bare metal RCM payload (originally made by shchmue)

ecryption keys lockpick payload rcm lockpick-rcm shchmue title-keys titlekeys prod-keys

C226

2 年前

hiphp

@yasserbdj96

The BackDoor of HIPHP gives you the power to control websites based on PHP using HTTP/HTTPS protocol. By sending files, tokens and commands through port 80's POST/GET method, users can access a range ...

backdoor controller PHP remoteaccess revisioncontrol onion HTTP Hacking payload Linux

Python188

1 年前

CVE-2021-21123-PoC-Google-Chrome

@Puliczek

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more...

翻译 - 🐱💻🐱💻谷歌浏览器 - 文件系统访问API - Maciej Pulikowski报告的漏洞|总BUG赏金奖励：$ 5.000 |CVE-2021-21123和5更多......

Cybersecurity Common Vulnerabilities and Exposures (CVE)bugbounty-writeups butbounty Exploit payload red-team Hacking

HTML166

4 年前