admin/Penetration_Testing_POC
1
0 Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2026-10-27 19:10:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,098 Commits 60 Branches 0 Tags
master
Commit Graph
2098 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Copilot 6693085677 Consolidate scattered CVE/exploit dirs and restore Markdown link format in README (#78) 
* chore: consolidate CVE and exploit directories and update README links

* fix: revert README links from HTML anchors back to Markdown format

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-07-04 15:42:15 +08:00
东方有鱼名为咸 5162375b66 Add files via upload 2026-06-28 21:12:11 +08:00
东方有鱼名为咸 71a8cd50b2 add 添加两款OSINT 工具sherlock和Aliens_eye 2026-06-28 19:22:56 +08:00
东方有鱼名为咸 87fce1581b add NebulaPulsar:一个 Java/C# WebShell 漏洞利用与植入工具，作为 Alien 项目的概念验证（PoC），适用于安全研究与漏洞利用实验。 2026-06-28 19:01:52 +08:00
东方有鱼名为咸 aad3c030a1 add jadx-ai-mcp：为 Jadx 提供 MCP 扩展，使 AI 工具能够直接调用本地 Jadx 进行 APK/DEX 反编译、搜索与分析，是构建 AI 驱动逆向工作流的关键组件。 2026-06-28 18:58:52 +08:00
东方有鱼名为咸 95fbc64849 add freellmapi：一个免费 LLM API 聚合服务，提供兼容 OpenAI 的统一接口，可无缝调用多个免费大模型，非常适合个人项目、教学和快速原型开发。 2026-06-28 18:54:08 +08:00
东方有鱼名为咸 8b378b17e8 add 【Linux提权】CVE‑2026‑46331:packet_edit_meme 2026-06-28 18:49:39 +08:00
东方有鱼名为咸 622927a01f add reverse-skill 一个面向逆向工程、渗透测试和安全研究的技能路由包，支持 AI 编码助手自动选择合适的工作流和工具链，涵盖 APK、二进制、JS、CTF 等场景。 2026-06-28 12:06:43 +08:00
东方有鱼名为咸 4023534e16 add Linux提权】CVE-2026-43503：（DirtyClone） 
【Linux提权】CVE-2026-43503：（DirtyClone）是一个演示 Linux 内核 Dirty‑COW 类漏洞的新型本地提权 PoC，利用网络栈共享内存处理缺陷实现对只读页缓存的非法写入并获取 root 权限。
 2026-06-27 16:27:56 +08:00
东方有鱼名为咸 4e4cc626d8 RootHawk：整合多种已公开本地提权漏洞（如 Dirty Pipe、PwnKit、Polkit 3560 等）的一键化 Linux 提权检测与利用工具。 2026-06-27 10:31:57 +08:00
github-actions[bot] e0be4cbe8f docs: 更新 1 篇文章 - LiteLLM v1.84.0 安全漏洞完整分析报告 [skip ci] 2026-06-23 15:13:26 +00:00
github-actions[bot] f272eddfd7 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 admin/Upload/upload 文件上传漏洞 [skip ci] 2026-06-18 04:39:59 +00:00
github-actions[bot] b65bff0d09 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 admin/secret/edit SQL注入漏洞 [skip ci] 2026-06-17 04:46:01 +00:00
github-actions[bot] 28b86725d2 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 clearUserDevice SQL注入漏洞 [skip ci] 2026-06-16 05:01:18 +00:00
github-actions[bot] 59a9430855 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 downloadSharedFile 任意文件读取漏洞 [skip ci] 2026-06-15 05:01:01 +00:00
github-actions[bot] e36ed50007 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 getFileTrueAddress SQL注入漏洞 [skip ci] 2026-06-14 04:46:07 +00:00
github-actions[bot] 2f610f2513 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 Pan/Upload/upload 文件上传漏洞 [skip ci] 2026-06-13 04:18:37 +00:00
github-actions[bot] 9c933719f8 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 uploadMultipleFile 任意文件上传漏洞 [skip ci] 2026-06-12 04:39:43 +00:00
Copilot 9ec7b9ce02 Add BishopFox CVE-2026-34908-check to README.md (#77) 
* Add Drun1baby/FineReportExploit to README.md next to existing FineReportExploit link

* Differentiate Drun1baby/FineReportExploit as Python tool next to Go tool in README.md

* Differentiate FineReportExploit implementations (Go vs Python) in README.md

* Add BishopFox CVE-2026-34908-check to README.md under IOT Device&Mobile Phone section

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-11 20:56:28 +08:00
github-actions[bot] 6a9725464d docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 user_expire_post SQL注入漏洞 [skip ci] 2026-06-11 04:27:10 +00:00
Copilot e57bca1701 Add Anthropic-Cybersecurity-Skills to README.md under tools section (#76) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-10 20:56:04 +08:00
github-actions[bot] 5255cfaefe docs: 更新 1 篇文章 - 孚盟云CRM ProductDetail.aspx SQL注入漏洞 [skip ci] 2026-06-10 04:14:20 +00:00
github-actions[bot] 4ef08e6b75 docs: 更新 1 篇文章 - 孚盟云CRM ProviderList.aspx SQL注入漏洞 [skip ci] 2026-06-09 04:02:54 +00:00
Copilot 0e08d7c027 docs: add GitHub PoC link for CVE-2026-8054 (#75) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-09 11:38:56 +08:00
github-actions[bot] a0ab651bdd docs: 更新 1 篇文章 - CVE-2026-8054 高危前台无需认证 SQL 注入漏洞（Pre-auth SQL Injection）分析复现 [skip ci] 2026-06-08 20:34:30 +00:00
Copilot ab653515bb Add LuaN1aoAgent cognitive AI pentesting agent to tools list (#74) 
* docs: add BreachWeave and adscan to README.md

* add LuaN1aoAgent to README.md in tools section

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-08 21:07:07 +08:00
github-actions[bot] 8351d32c25 docs: 更新 1 篇文章 - 孚盟云CRM ProductSelect.aspx SQL注入漏洞 [skip ci] 2026-06-08 04:41:59 +00:00
github-actions[bot] 327e686ce8 docs: 更新 1 篇文章 - 孚盟云CRM ProductDetail.aspx SQL注入漏洞 [skip ci] 2026-06-07 04:26:11 +00:00
Copilot 038c80db76 Add Nginx HTTP/2 Bomb Exploit links to README.md (#73) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-06 12:52:16 +08:00
github-actions[bot] 6189766487 docs: 更新 1 篇文章 - 孚盟云CRM Product_field.aspx SQL注入漏洞 [skip ci] 2026-06-06 03:59:46 +00:00
github-actions[bot] 32e3427fec docs: 更新 1 篇文章 - 孚盟云CRM ProductList.aspx SQL注入漏洞 [skip ci] 2026-06-05 04:17:05 +00:00
Copilot 7460fb4b76 Add AssppJailbroken to IOT Device&Mobile Phone section in README.md (#72) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-04 23:55:50 +08:00
Copilot e62e6ea23d Add AgonySec/ThinkPHPGUI to README tools section (#71) 
* Add AgonySec/ThinkPHPGUI to README.md at line 1940

* Update ThinkPHPGUI entry in README.md with consistent capitalization

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-04 22:20:16 +08:00
github-actions[bot] 740254cca5 docs: 更新 1 篇文章 - 孚盟云CRM AjaxProductList.ashx SQL注入漏洞 [skip ci] 2026-06-04 04:42:49 +00:00
github-actions[bot] c0807ebc57 docs: 更新 1 篇文章 - 孚盟云CRM ProductGrid.aspx SQL注入漏洞 [skip ci] 2026-06-03 04:48:23 +00:00
github-actions[bot] 9d29d150c5 docs: 更新 1 篇文章 - 孚盟云CRM Price_detail.aspx SQL注入漏洞 [skip ci] 2026-06-02 11:51:29 +00:00
Copilot fcdbf59471 docs: add PrismSpace link to README (#70) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-01 21:56:10 +08:00
github-actions[bot] 68be5653c5 docs: 更新 1 篇文章 - 孚盟云CRM Inquiry.aspx SQL注入漏洞 [skip ci] 2026-06-01 04:50:49 +00:00
github-actions[bot] a6d696d4d2 docs: 更新 1 篇文章 - 孚盟云CRM LoadMailAttachFile.aspx 任意文件读取/移动 [skip ci] 2026-05-31 04:21:31 +00:00
dependabot[bot] db7fbca5ab Bump urllib3 from 1.26.5 to 2.7.0 in /discuz-ml-rce (#61) 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.5 to 2.7.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.5...2.7.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-29 11:51:50 +08:00
Copilot 65db36acea docs: add TongWeb exploit and plugin links to README (#69) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-05-29 11:51:18 +08:00
Copilot 68fff2a2db Add CIFSwitch link to Linux privilege escalation section in README (#68) 2026-05-29 10:15:36 +08:00
CopilotandMr-xn ad9d7a3adc docs: add Copy-Fail Kubernetes PoC link to CVE-2026-31431 entries (#66) 
Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/4adc4e93-692f-48d6-9e33-701e8aed23ca

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-25 16:17:25 +08:00
CopilotandMr-xn 87cce6fcf9 Add CACM (Linux权限维持+后渗透工具) to 提权辅助相关 section in README.md (#65) 
Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/822e18e0-a2c4-4caa-805a-66703dc4e9c1

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-23 08:31:34 +08:00
github-actions[bot] 12ce4a2f7b docs: 更新 1 篇文章 - 用友 NC 系统 IMsgCenterWebService SQL注入漏洞 [skip ci] 2026-05-18 04:11:16 +00:00
CopilotandMr-xn 05eeb7c991 docs: add zenproxy link to proxy tools list (#63) 
Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/4ce03e50-871c-425d-bb00-862c9e382d83

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-17 10:38:18 +08:00
Copilot 95422f6c72 docs: Add CVE-2026-34621 (Adobe Acrobat SSRF/JS injection) and CVE-2026-44578 (Next.js WebSocket SSRF) PoC links (#62) 2026-05-16 10:29:08 +08:00
github-actions[bot] e420f060fe docs: 更新 1 篇文章 - 孚盟云CRM BusiPriceOkPrint.aspx SQL注入漏洞 [skip ci] 2026-05-14 03:54:14 +00:00
github-actions[bot] f13cf8ec96 docs: 更新 1 篇文章 - 孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞 [skip ci] 2026-05-13 03:54:47 +00:00
github-actions[bot] 82a8f01e3c docs: 更新 1 篇文章 - 孚盟云CRM BusinessPriceOk.aspx SQL注入漏洞 [skip ci] 2026-05-12 03:45:37 +00:00