admin/Penetration_Testing_POC
1
0 Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2026-10-29 03:40:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,044 Commits 60 Branches 0 Tags
9ef475cd2b8fcb07de06caf21a76c69609e42f3e
Commit Graph
2044 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
copilot-swe-agent[bot]andMr-xn 9ef475cd2b docs: add CVE-2026-42980 README entry 
Co-authored-by: Mr-xn <[email protected]>
 2026-09-20 05:44:39 +00:00
CopilotandMr-xn 77a27d00ab Reclassify CVE-2026-43783 as macOS LPE in README (#91) 
* docs: add CVE-2026-43783 reference to README

Co-authored-by: Mr-xn <[email protected]>

* docs: move CVE-2026-43783 to macOS privilege escalation section

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-20 01:17:37 -04:00
CopilotandMr-xn b7ac2019b8 Update README with three new article paths (#90) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-16 08:49:10 -04:00
东方有鱼名为咸 2e34773d59 Add files via upload 2026-09-16 20:37:08 +08:00
CopilotandMr-xn aa18a94ad6 Update README index with latest documentation additions (#89) 
* README update for recent article entry

Co-authored-by: Mr-xn <[email protected]>

* Fix README article ordering

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-10 10:32:31 -04:00
东方有鱼名为咸 e6c77a07a4 Add files via upload 2026-09-10 20:20:25 +08:00
东方有鱼名为咸 fc69fd014c Add files via upload 2026-09-10 20:19:51 +08:00
CopilotandMr-xn ede4cfd036 docs: add ShowDoc README link (#88) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-04 09:07:14 -04:00
东方有鱼名为咸 64fedf5149 add ShowDoc ≤ v3.9.2 registerByVerify 未授权PHP代码注入致远程代码执行漏洞 2026-09-04 20:57:28 +08:00
CopilotandMr-xn 1a2855bc6a Add Nacos auth bypass exploit chain to README tools section (#87) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-30 09:31:26 -04:00
东方有鱼名为咸 a8ad634ebd Add files via upload 2026-08-30 21:25:54 +08:00
Copilot 9117b5456d Add dsh-reverse-skill README entry (#86) 2026-08-22 11:07:36 +08:00
东方有鱼名为咸 980787ad46 add dsh-pentest 一个用于在dsh里执行常规简单的渗透测试插件，方便渗透测试/安全运营人员对数字资产快速的进行安全检查 2026-08-20 10:53:59 -04:00
CopilotandMr-xn 3d2f0478c2 Fix README book links for recently added entries (#85) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-19 03:51:22 -04:00
东方有鱼名为咸 15f01b6f17 Add files via upload 2026-08-19 15:26:14 +08:00
github-actions[bot] 394426a532 docs: 更新 1 篇文章 - 普华PowerPMS /Plan/BatchHandleFeedBackRecord 鉴权绕过漏洞 [skip ci] 2026-08-16 09:32:15 +00:00
CopilotandMr-xn 1a3b17d78f Add ragflow-audit (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286) to Web APP section (#84) 
* docs: append new books references to README 文章/书籍/教程相关 section

Co-authored-by: Mr-xn <[email protected]>

* Add ragflow-audit (CVE-2026-28797/CVE-2026-24770/CVE-2025-69286) to Web APP section

Co-authored-by: Mr-xn <[email protected]>

* Add SnowEyes Chrome extension (sensitive info detection) to tools section

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-11 08:36:24 -04:00
东方有鱼名为咸 1933ebcf55 Add files via upload 2026-08-11 07:52:33 -04:00
东方有鱼名为咸 68da8bcaf4 Update README.md 2026-08-09 08:14:02 -04:00
github-actions[bot] de0479d279 docs: 更新 1 篇文章 - 用友GRP-U8Cloud产品jmreport组件模块Freemarker模板SSTI致RCE漏洞分析 [skip ci] 2026-08-09 07:04:13 +00:00
CopilotandMr-xn 7432ea5857 add latest books to README 文章/书籍/教程相关 section (#83) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-08 05:47:08 -04:00
东方有鱼名为咸 65f92010d5 Add files via upload 2026-08-08 05:37:20 -04:00
东方有鱼名为咸 55a052353d Add files via upload 2026-08-08 01:05:02 -04:00
东方有鱼名为咸 8dd4bd1172 Add new resources and links in README 
Updated the README to include additional resources and links related to FastJson and Spring Framework vulnerabilities.
 2026-08-02 03:02:44 -04:00
东方有鱼名为咸 6602db5059 Add files via upload 2026-08-02 02:59:00 -04:00
东方有鱼名为咸 0d4818c01b Update FastJson2 section in README 2026-08-02 01:59:24 -04:00
东方有鱼名为咸 210458c6cf Add files via upload 2026-08-02 01:57:59 -04:00
东方有鱼名为咸 d7190f28b4 Add files via upload 2026-08-02 00:21:13 -04:00
东方有鱼名为咸 d492180482 Remove FastJson2 RCE analysis entry from README 
add FastJson2 Hash 碰撞 RCE 分析与复现
 2026-08-01 10:45:44 -04:00
东方有鱼名为咸 7bde93dbb1 add FastJson2 Hash 碰撞 RCE 分析与复现 2026-08-01 10:42:05 -04:00
东方有鱼名为咸 08be292dfd Fix typos in vulnerability links in README.md 
add CVE‑2026‑49176（Windows WalletService 本地提权漏洞） 的 本地缓冲区溢出（BOF）风格的 PoC/Exploit
 2026-08-01 06:17:08 -04:00
github-actions[bot] ef683709d3 docs: 更新 1 篇文章 - 金和OA C6 PlanGiveOut.aspx SQL注入漏洞+越权访问IDOR漏洞+XSS漏洞 [skip ci] 2026-07-30 02:46:32 +00:00
github-actions[bot] bc8c6ce29b docs: 更新 1 篇文章 - 用友U8Cloud extsystem.dst 接口SQL注入漏洞 [skip ci] 2026-07-27 03:38:34 +00:00
东方有鱼名为咸 170547ef4d add 【Windows提取】CVE-2026-54121：利用 Certighost 漏洞伪造域控（Domain Controller）的证书，从而获得 域控级别的 Kerberos 身份，最终实现 完全接管整个 Active Directory 域 2026-07-25 00:29:46 -04:00
东方有鱼名为咸 189289e3e5 add RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0 2026-07-23 09:24:50 -04:00
github-actions[bot] d32962f55e docs: 更新 1 篇文章 - Fastjson 1.2.83 默认配置下的远程代码执行RCE [skip ci] 2026-07-20 16:28:01 +00:00
东方有鱼名为咸 31091afe00 add Fastjson 1.2.68-1.2.83 版本默认配置在特定场景下的反序列化RCE实现 2026-07-20 12:24:04 -04:00
东方有鱼名为咸 61571b66d6 Update README.md 2026-07-18 22:24:14 -04:00
东方有鱼名为咸 bdef3cd74d add wp2shell + lab 2026-07-18 11:12:27 -04:00
东方有鱼名为咸 70ddd575be update wp2shell scripts 2026-07-18 06:26:04 -04:00
东方有鱼名为咸 6fb2c3e945 add CVE-2026-63030 + CVE-2026-60137: pre-authentication SQL injection in WordPress core via REST batch-route confusion. 
CVE-2026-63030 + CVE-2026-60137: pre-authentication SQL injection in WordPress core via REST batch-route confusion.
 2026-07-18 06:09:40 -04:00
github-actions[bot] 4686235f11 docs: 更新 1 篇文章 - 用友U8Cloud XChangeServlet SQL注入漏洞+XXE漏洞 [skip ci] 2026-07-16 14:05:54 +00:00
东方有鱼名为咸 1ba941cd85 Add Upload_Auto_Fuzz tool description to README 
Added a new tool for automated testing of web upload interfaces to the README.
 2026-07-15 09:10:34 -04:00
东方有鱼名为咸 8b90213e11 add 【Linux提权】 CVE‑2026‑46242（Bad Epoll） 2026-07-05 14:30:31 +08:00
dependabot[bot] 9b887ce364 Bump requests in /vuln_pocs/exploit-tools/tp5-getshell (#79) 
Bumps [requests](https://github.com/psf/requests) from 2.31.0 to 2.33.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.31.0...v2.33.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-05 13:06:00 +08:00
Mehdi BOUTAYEB 29ff1f0c29 Add Darkmoon (#80) 2026-07-05 13:05:23 +08:00
Copilot 6693085677 Consolidate scattered CVE/exploit dirs and restore Markdown link format in README (#78) 
* chore: consolidate CVE and exploit directories and update README links

* fix: revert README links from HTML anchors back to Markdown format

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-07-04 15:42:15 +08:00
东方有鱼名为咸 5162375b66 Add files via upload 2026-06-28 21:12:11 +08:00
东方有鱼名为咸 71a8cd50b2 add 添加两款OSINT 工具sherlock和Aliens_eye 2026-06-28 19:22:56 +08:00
东方有鱼名为咸 87fce1581b add NebulaPulsar:一个 Java/C# WebShell 漏洞利用与植入工具，作为 Alien 项目的概念验证（PoC），适用于安全研究与漏洞利用实验。 2026-06-28 19:01:52 +08:00