admin/Penetration_Testing_POC
1
0 Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2026-10-28 19:30:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add ragflow-audit (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286) to Web APP section (#84)

Browse Source 
* docs: append new books references to README 文章/书籍/教程相关 section

Co-authored-by: Mr-xn <[email protected]>

* Add ragflow-audit (CVE-2026-28797/CVE-2026-24770/CVE-2025-69286) to Web APP section

Co-authored-by: Mr-xn <[email protected]>

* Add SnowEyes Chrome extension (sensitive info detection) to tools section

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
This commit is contained in:
CopilotandMr-xn authored and GitHub committed 2026-08-11 08:36:24 -04:00
1 parent 1933ebcf55
commit 1a3b17d78f
1 file changed
+6
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+6
View File
@@ -872,6 +872,7 @@
- [大蚂蚁 (BigAnt) 即时通讯系统 admin/secret/edit SQL注入漏洞](https://mrxn.net/jswz/bigant-admin-secret-edit-sqli.html)
- [大蚂蚁 (BigAnt) 即时通讯系统 admin/Upload/upload 文件上传漏洞](https://mrxn.net/jswz/bigant-admin-Upload-upload-rce.html)
- [LiteLLM v1.84.0 安全漏洞完整分析报告](https://mrxn.net/jswz/LiteLLM_v1840_security_analysis.html)
- [ragflow-audit：RAGFlow 三洞审计工具（CVE-2026-28797 SSTI→RCE / CVE-2026-24770 Zip Slip / CVE-2025-69286 API key 可推导），纯 Python 标准库，无第三方依赖](https://github.com/qianlijaingshan/ragflow-audit)
- [用友U8Cloud XChangeServlet SQL注入漏洞+XXE漏洞](https://mrxn.net/jswz/yonyou-u8c-XChangeServlet-xxe-sqli.html)
- [CVE-2026-63030 + CVE-2026-60137: pre-authentication SQL injection in WordPress core via REST batch-route confusion.](https://github.com/47Cid/wp2shell-lab) | [wp2shell-poc](https://github.com/Icex0/wp2shell-poc) | [wp2shell-单文件利用+批量检测](https://github.com/Mr-xn/wp2shell) | [wp2shell+lab](https://github.com/0xsha/wp2shell) | [CVE-2026-63030:wp2shell vulhub](https://github.com/vulhub/vulhub/tree/master/wordpress/CVE-2026-63030)
- [Fastjson 1.2.68-1.2.83 版本默认配置在特定场景下的反序列化RCE实现](https://github.com/wouijvziqy/Fastjson-JsonType-RCE-PoC) | [fastjson-jsontype-rce-lab](https://github.com/dinosn/fastjson-jsontype-rce-lab) | [2026FastjsonPoC](https://github.com/ThanatosXingYu/2026FastjsonPoC)
@@ -1597,6 +1598,7 @@
- [Security_Product:开源安全产品源码](https://github.com/birdhan/Security_Product)
- [flask_memory_shell:Flask 内存马](https://github.com/iceyhexman/flask_memory_shell)
- [SourceDetector:用于发现源码文件(*.map)的chrome插件](https://github.com/SunHuawei/SourceDetector)
- [SnowEyes（雪瞳）：Chrome/Edge 浏览器扩展，用于检测和提取网页中的敏感信息，支持动态内容扫描、深度扫描、Webpack 适配及网站指纹检测](https://github.com/SickleSec/SnowEyes)
- [CrossNet-Beta:红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件](https://github.com/dr0op/CrossNet-Beta)
- [slopShell：一款功能强大的PHP Webshell](https://github.com/oldkingcone/slopShell)
- [rustcat:netcat的代替品](https://github.com/robiot/rustcat)
@@ -3137,6 +3139,10 @@
- [Java反序列化系列·基础篇] [Hessian 协议详解](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Hessian%20%E5%8D%8F%E8%AE%AE%E8%AF%A6%E8%A7%A3.md) | [Java Agent 详解](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20Agent%20%E8%AF%A6%E8%A7%A3.md) | [Java 动态代理](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20%E5%8A%A8%E6%80%81%E4%BB%A3%E7%90%86.md) | [Java 序列化与反序列化](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20%E5%BA%8F%E5%88%97%E5%8C%96%E4%B8%8E%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96.md) | [Java 的类加载与反射](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20%E7%9A%84%E7%B1%BB%E5%8A%A0%E8%BD%BD%E4%B8%8E%E5%8F%8D%E5%B0%84.md) | [Javassist 使用指南](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Javassist%20%E4%BD%BF%E7%94%A8%E6%8C%87%E5%8D%97.md) | [RMI 协议详解](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20RMI%20%E5%8D%8F%E8%AE%AE%E8%AF%A6%E8%A7%A3.md) | [Tomcat 架构](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Tomcat%20%E6%9E%B6%E6%9E%84.md)
- [Java反序列化系列·漏洞篇] [CC1链之ysoserial版](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20CC1%20%E9%93%BE%E4%B9%8B%20ysoserial%20%E7%89%88.md) | [Java反序列化之CC1链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20CC1%20%E9%93%BE.md) | [Java反序列化之CC3链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20CC3%20%E9%93%BE.md) | [Java反序列化之CC4+CC2+CC5+CC7链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20CC4%2BCC2%2BCC5%2BCC7%20%E9%93%BE.md) | [Java反序列化之Rome链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20Rome%20%E9%93%BE.md) | [Fastjson反序列化](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Fastjson%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96.md) | [Fastjson 1.2.68-1.2.80利用](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Fastjson%201.2.68%20-%201.2.80%20%E5%88%A9%E7%94%A8.md) | [Hessian反序列化详解](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Hessian%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%AF%A6%E8%A7%A3.md) | [Hessian Aspectj二次反序列化新链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Hessian%20Aspectj%20%E4%BA%8C%E6%AC%A1%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%96%B0%E9%93%BE.md) | [JNDI注入详解](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20JNDI%20%E6%B3%A8%E5%85%A5%E8%AF%A6%E8%A7%A3.md) | [RMI相关的攻击](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20RMI%20%E7%9B%B8%E5%85%B3%E7%9A%84%E6%94%BB%E5%87%BB.md) | [Rome链之HotSwappableTargetSource利用链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Rome%20%E9%93%BE%E4%B9%8B%20HotSwappableTargetSource%20%E5%88%A9%E7%94%A8%E9%93%BE.md) | [SnakeYaml反序列化](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20SnakeYaml%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96.md) | [JavaAgent内存马](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20JavaAgent%20%E5%86%85%E5%AD%98%E9%A9%AC.md) | [Spring内存马](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Spring%20%E5%86%85%E5%AD%98%E9%A9%AC.md) | [Tomcat内存马](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Tomcat%20%E5%86%85%E5%AD%98%E9%A9%AC.md) | [URLDNS利用链分析](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20URLDNS%20%E5%88%A9%E7%94%A8%E9%93%BE%E5%88%86%E6%9E%90.md) | [ysoserial的JRMP模块分析](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20ysoserial%20%E7%9A%84%20JRMP%20%E6%A8%A1%E5%9D%97%E5%88%86%E6%9E%90.md) | [关于JEP 290](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20%E5%85%B3%E4%BA%8E%20JEP%20290.md)
- [Java反序列化系列·配置篇] [IDEA查看带sun包的JDK源码](./books/%E9%85%8D%E7%BD%AE%E7%AF%87%20-%20IDEA%20%E6%9F%A5%E7%9C%8B%E5%B8%A6%20sun%20%E5%8C%85%E7%9A%84%20JDK%20%E6%BA%90%E7%A0%81.md) | [Maven手动下载与导入依赖](./books/%E9%85%8D%E7%BD%AE%E7%AF%87%20-%20Maven%20%E6%89%8B%E5%8A%A8%E4%B8%8B%E8%BD%BD%E4%B8%8E%E5%AF%BC%E5%85%A5%E4%BE%9D%E8%B5%96.md)
- [AI 渗透初探：从零开始的实战赋能记录](./books/AI%20%E6%B8%97%E9%80%8F%E5%88%9D%E6%8E%A2%EF%BC%9A%E4%BB%8E%E9%9B%B6%E5%BC%80%E5%A7%8B%E7%9A%84%E5%AE%9E%E6%88%98%E8%B5%8B%E8%83%BD%E8%AE%B0%E5%BD%95.md)
- [Android移动安全系列] [Android移动安全第一章_组件导出安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B8%80%E7%AB%A0_%E7%BB%84%E4%BB%B6%E5%AF%BC%E5%87%BA%E5%AE%89%E5%85%A8.md) | [Android移动安全第二章_Intent安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%BA%8C%E7%AB%A0_Intent%E5%AE%89%E5%85%A8.md) | [Android移动安全第三章_Binder服务安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B8%89%E7%AB%A0_Binder%E6%9C%8D%E5%8A%A1%E5%AE%89%E5%85%A8.md) | [Android移动安全第四章_ContentProvider安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%9B%9B%E7%AB%A0_ContentProvider%E5%AE%89%E5%85%A8.md) | [Android移动安全第五章_WebView安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%BA%94%E7%AB%A0_WebView%E5%AE%89%E5%85%A8.md) | [Android移动安全第六章_UI欺骗与钓鱼](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%85%AD%E7%AB%A0_UI%E6%AC%BA%E9%AA%97%E4%B8%8E%E9%92%93%E9%B1%BC.md) | [Android移动安全第七章_DeepLink安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B8%83%E7%AB%A0_DeepLink%E5%AE%89%E5%85%A8.md) | [Android移动安全第八章_广播安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%85%AB%E7%AB%A0_%E5%B9%BF%E6%92%AD%E5%AE%89%E5%85%A8.md) | [Android移动安全第九章_PendingIntent安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B9%9D%E7%AB%A0_PendingIntent%E5%AE%89%E5%85%A8.md) | [Android移动安全第十章_系统设置安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E7%AB%A0_%E7%B3%BB%E7%BB%9F%E8%AE%BE%E7%BD%AE%E5%AE%89%E5%85%A8.md) | [Android移动安全第十一章_SSRF与网络安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%B8%80%E7%AB%A0_SSRF%E4%B8%8E%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8.md) | [Android移动安全第十二章_加密与数据存储安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%BA%8C%E7%AB%A0_%E5%8A%A0%E5%AF%86%E4%B8%8E%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8%E5%AE%89%E5%85%A8.md) | [Android移动安全第十三章_认证与证书校验](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%B8%89%E7%AB%A0_%E8%AE%A4%E8%AF%81%E4%B8%8E%E8%AF%81%E4%B9%A6%E6%A0%A1%E9%AA%8C.md) | [Android移动安全第十四章_ZipSlip路径遍历](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E5%9B%9B%E7%AB%A0_ZipSlip%E8%B7%AF%E5%BE%84%E9%81%8D%E5%8E%86.md) | [Android移动安全第十五章_FragmentInjection](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%BA%94%E7%AB%A0_FragmentInjection.md) | [Android移动安全第十六章_SELinux与沙箱机制](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E5%85%AD%E7%AB%A0_SELinux%E4%B8%8E%E6%B2%99%E7%AE%B1%E6%9C%BA%E5%88%B6.md)
- [CVE-2026-41843 Spring Framework路径遍历漏洞浅析](./books/CVE-2026-41843%20Spring%20Framework%E8%B7%AF%E5%BE%84%E9%81%8D%E5%8E%86%E6%BC%8F%E6%B4%9E%E6%B5%85%E6%9E%90.md)
- [WebSocket 实战：基于协议特点的漏洞挖掘](./books/WebSocket%20%E5%AE%9E%E6%88%98%EF%BC%9A%E5%9F%BA%E4%BA%8E%E5%8D%8F%E8%AE%AE%E7%89%B9%E7%82%B9%E7%9A%84%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98.md)
## <span id="head9"> 说明</span>