admin/Penetration_Testing_POC
1
0 Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2026-10-28 19:30:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,063 Commits 60 Branches 0 Tags
df91c9f2ebade03ab843b65b6e08a2f928eb588d
Commit Graph
2063 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] df91c9f2eb docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 getOpersmap接口SQL注入漏洞 | 友加畅捷管理系统标准版 GetLoginUserImg接口SQL注入漏洞 [skip ci] 2026-10-14 11:32:28 +00:00
github-actions[bot] 307155dc14 docs: 更新 2 篇文章 - 友加畅捷管理系统标准版 GetFullIDFullPath接口SQL注入漏洞 | 友加畅捷管理系统标准版 CreateImage接口SQL注入漏洞 [skip ci] 2026-10-14 04:21:29 +00:00
github-actions[bot] 7cf102fc16 docs: 更新 1 篇文章 - 用友U8+ UFFileManagerServices WebUploadServices 未授权任意文件写命令执行漏洞 [skip ci] 2026-10-13 16:49:55 +00:00
github-actions[bot] e30b9465d6 docs: 更新 2 篇文章 - 用友U8+ U8SL GetPassword 匿名口令重置设计缺陷漏洞 | 用友U8+ U8AuditWebSite U8ForWhereServices 未授权任意文件写命令执行漏洞 [skip ci] 2026-10-13 06:19:15 +00:00
github-actions[bot] b3efadde58 docs: 更新 4 篇文章 - 用友U8+ PFWeb U8BM WebParamServiceBroker 未授权任意程序集反射调用代码执行漏洞 | 用友U8+ OCAPI Update 未授权任意文件写命令执行漏洞 | 用友U8+ EIS SyncService 未授权任意文件上传命令执行漏洞 | 用友U8+ EIS ConfigService 未授权敏感配置信息泄露漏洞 [skip ci] 2026-10-12 10:31:13 +00:00
github-actions[bot] 84bc40ea45 docs: 更新 1 篇文章 - 用友U8+ DSaaS分析云 未授权文件读取后门令牌伪造与连接串注入漏洞 [skip ci] 2026-10-11 12:27:55 +00:00
github-actions[bot] 7903fc75bd docs: 更新 2 篇文章 - 用友U8+ U8KCSN Service 未授权数据库连接串注入及SQL注入漏洞 | 用友U8+ U8AuditWebSite WorkFlowTaskService 未授权连接串注入SQL注入命令执行漏洞 [skip ci] 2026-10-11 05:06:45 +00:00
github-actions[bot] 57c4c3bbd0 docs: 更新 2 篇文章 - 用友U8+ U8AuditWebSite MAService 未授权SSRF连接串注入命令执行漏洞 | 用友U8+ u8webapi 未授权任意SQL执行及SA口令泄露漏洞 [skip ci] 2026-10-10 09:37:54 +00:00
github-actions[bot] 2c1d2edae2 docs: 更新 1 篇文章 - 用友U8+ U8BM FBWeb 未授权数据库连接串注入漏洞 [skip ci] 2026-10-10 00:38:45 +00:00
github-actions[bot] 42bfe33a33 docs: 更新 3 篇文章 - 用友U8+ U8remote GNRemote 未授权导出调用账户接管与SQLite注入漏洞 | 用友U8+ U8AuditWebSite EmailService SQL注入及BinaryFormatter反序列化RCE漏洞 | 用友U8+ U8Application U8CCLoginService等未授权凭据读写与信息泄露漏洞 [skip ci] 2026-10-09 10:18:50 +00:00
github-actions[bot] 3cb0052ed3 docs: 更新 1 篇文章 - 用友U8+ U8Application U8LoginServices 硬编码后门账号及未授权SA口令泄露漏洞 [skip ci] 2026-10-09 01:05:47 +00:00
github-actions[bot] 771ed5b4e2 docs: 更新 2 篇文章 - 用友U8+ U8AuditWebSite U8Interface 未授权云同步信息泄露及会话管理缺陷漏洞 | 用友U8+ EIS U8DuDuService.asmx 任意SQL执行致命令执行漏洞 [skip ci] 2026-10-08 18:42:08 +00:00
github-actions[bot] 88e9e1690e docs: 更新 1 篇文章 - 用友U8+ EIS服务 APIProxyHandler(proxy) 未授权SSRF漏洞 [skip ci] 2026-10-03 04:44:19 +00:00
CopilotandMr-xn cd9cc4ee83 Update README with latest docs (#94) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-29 11:20:43 -04:00
东方有鱼名为咸 6d493105eb Add files via upload 2026-09-29 23:14:06 +08:00
github-actions[bot] 13a0c3f551 docs: 更新 1 篇文章 - PowerJob最新版v5.1.2 friend-process接口未授权远程代码执行漏洞（CVE-2026-75429） [skip ci] 2026-09-24 16:53:10 +00:00
CopilotandMr-xn a8e67708b0 Add ysonet to README (#93) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-24 07:37:25 -04:00
github-actions[bot] fada519527 docs: 更新 1 篇文章 - CRMEB系统最新版v6.0.0 JWT默认密钥认证绕过RCE漏洞 [skip ci] 2026-09-23 04:12:16 +00:00
github-actions[bot] 7525c2595f docs: 更新 15 篇文章 - CRMEB系统最新版v6.0.0 RoutineCI_preview方法命令注入漏洞 | CRMEB系统最新版v6.0.0save_basics接口任意文件读取漏洞 | CRMEB系统最新版v6.0.0theme_import接口zip解压RCE漏洞 | ChanCMS-v3.3.0存在SQL注入漏洞 | ChanCMS-v3.3.0存在远程代码执行漏洞 ... 等共15篇 [skip ci] 2026-09-22 04:18:17 +00:00
CopilotandMr-xn a82d3f71fa docs: add CVE-2026-42980 README entry (#92) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-20 01:46:11 -04:00
CopilotandMr-xn 77a27d00ab Reclassify CVE-2026-43783 as macOS LPE in README (#91) 
* docs: add CVE-2026-43783 reference to README

Co-authored-by: Mr-xn <[email protected]>

* docs: move CVE-2026-43783 to macOS privilege escalation section

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-20 01:17:37 -04:00
CopilotandMr-xn b7ac2019b8 Update README with three new article paths (#90) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-16 08:49:10 -04:00
东方有鱼名为咸 2e34773d59 Add files via upload 2026-09-16 20:37:08 +08:00
CopilotandMr-xn aa18a94ad6 Update README index with latest documentation additions (#89) 
* README update for recent article entry

Co-authored-by: Mr-xn <[email protected]>

* Fix README article ordering

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-10 10:32:31 -04:00
东方有鱼名为咸 e6c77a07a4 Add files via upload 2026-09-10 20:20:25 +08:00
东方有鱼名为咸 fc69fd014c Add files via upload 2026-09-10 20:19:51 +08:00
CopilotandMr-xn ede4cfd036 docs: add ShowDoc README link (#88) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-09-04 09:07:14 -04:00
东方有鱼名为咸 64fedf5149 add ShowDoc ≤ v3.9.2 registerByVerify 未授权PHP代码注入致远程代码执行漏洞 2026-09-04 20:57:28 +08:00
CopilotandMr-xn 1a2855bc6a Add Nacos auth bypass exploit chain to README tools section (#87) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-30 09:31:26 -04:00
东方有鱼名为咸 a8ad634ebd Add files via upload 2026-08-30 21:25:54 +08:00
Copilot 9117b5456d Add dsh-reverse-skill README entry (#86) 2026-08-22 11:07:36 +08:00
东方有鱼名为咸 980787ad46 add dsh-pentest 一个用于在dsh里执行常规简单的渗透测试插件，方便渗透测试/安全运营人员对数字资产快速的进行安全检查 2026-08-20 10:53:59 -04:00
CopilotandMr-xn 3d2f0478c2 Fix README book links for recently added entries (#85) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-19 03:51:22 -04:00
东方有鱼名为咸 15f01b6f17 Add files via upload 2026-08-19 15:26:14 +08:00
github-actions[bot] 394426a532 docs: 更新 1 篇文章 - 普华PowerPMS /Plan/BatchHandleFeedBackRecord 鉴权绕过漏洞 [skip ci] 2026-08-16 09:32:15 +00:00
CopilotandMr-xn 1a3b17d78f Add ragflow-audit (CVE-2026-28797 / CVE-2026-24770 / CVE-2025-69286) to Web APP section (#84) 
* docs: append new books references to README 文章/书籍/教程相关 section

Co-authored-by: Mr-xn <[email protected]>

* Add ragflow-audit (CVE-2026-28797/CVE-2026-24770/CVE-2025-69286) to Web APP section

Co-authored-by: Mr-xn <[email protected]>

* Add SnowEyes Chrome extension (sensitive info detection) to tools section

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-11 08:36:24 -04:00
东方有鱼名为咸 1933ebcf55 Add files via upload 2026-08-11 07:52:33 -04:00
东方有鱼名为咸 68da8bcaf4 Update README.md 2026-08-09 08:14:02 -04:00
github-actions[bot] de0479d279 docs: 更新 1 篇文章 - 用友GRP-U8Cloud产品jmreport组件模块Freemarker模板SSTI致RCE漏洞分析 [skip ci] 2026-08-09 07:04:13 +00:00
CopilotandMr-xn 7432ea5857 add latest books to README 文章/书籍/教程相关 section (#83) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-08-08 05:47:08 -04:00
东方有鱼名为咸 65f92010d5 Add files via upload 2026-08-08 05:37:20 -04:00
东方有鱼名为咸 55a052353d Add files via upload 2026-08-08 01:05:02 -04:00
东方有鱼名为咸 8dd4bd1172 Add new resources and links in README 
Updated the README to include additional resources and links related to FastJson and Spring Framework vulnerabilities.
 2026-08-02 03:02:44 -04:00
东方有鱼名为咸 6602db5059 Add files via upload 2026-08-02 02:59:00 -04:00
东方有鱼名为咸 0d4818c01b Update FastJson2 section in README 2026-08-02 01:59:24 -04:00
东方有鱼名为咸 210458c6cf Add files via upload 2026-08-02 01:57:59 -04:00
东方有鱼名为咸 d7190f28b4 Add files via upload 2026-08-02 00:21:13 -04:00
东方有鱼名为咸 d492180482 Remove FastJson2 RCE analysis entry from README 
add FastJson2 Hash 碰撞 RCE 分析与复现
 2026-08-01 10:45:44 -04:00
东方有鱼名为咸 7bde93dbb1 add FastJson2 Hash 碰撞 RCE 分析与复现 2026-08-01 10:42:05 -04:00
东方有鱼名为咸 08be292dfd Fix typos in vulnerability links in README.md 
add CVE‑2026‑49176（Windows WalletService 本地提权漏洞） 的 本地缓冲区溢出（BOF）风格的 PoC/Exploit
 2026-08-01 06:17:08 -04:00