admin/Penetration_Testing_POC
1
0 Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2026-10-28 19:30:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,082 Commits 60 Branches 0 Tags
fd17182df871e520002f7ef562fcab8be004d67b
Commit Graph
2082 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] 2f610f2513 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 Pan/Upload/upload 文件上传漏洞 [skip ci] 2026-06-13 04:18:37 +00:00
github-actions[bot] 9c933719f8 docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 uploadMultipleFile 任意文件上传漏洞 [skip ci] 2026-06-12 04:39:43 +00:00
Copilot 9ec7b9ce02 Add BishopFox CVE-2026-34908-check to README.md (#77) 
* Add Drun1baby/FineReportExploit to README.md next to existing FineReportExploit link

* Differentiate Drun1baby/FineReportExploit as Python tool next to Go tool in README.md

* Differentiate FineReportExploit implementations (Go vs Python) in README.md

* Add BishopFox CVE-2026-34908-check to README.md under IOT Device&Mobile Phone section

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-11 20:56:28 +08:00
github-actions[bot] 6a9725464d docs: 更新 1 篇文章 - 大蚂蚁 (BigAnt) 即时通讯系统 user_expire_post SQL注入漏洞 [skip ci] 2026-06-11 04:27:10 +00:00
Copilot e57bca1701 Add Anthropic-Cybersecurity-Skills to README.md under tools section (#76) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-10 20:56:04 +08:00
github-actions[bot] 5255cfaefe docs: 更新 1 篇文章 - 孚盟云CRM ProductDetail.aspx SQL注入漏洞 [skip ci] 2026-06-10 04:14:20 +00:00
github-actions[bot] 4ef08e6b75 docs: 更新 1 篇文章 - 孚盟云CRM ProviderList.aspx SQL注入漏洞 [skip ci] 2026-06-09 04:02:54 +00:00
Copilot 0e08d7c027 docs: add GitHub PoC link for CVE-2026-8054 (#75) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-09 11:38:56 +08:00
github-actions[bot] a0ab651bdd docs: 更新 1 篇文章 - CVE-2026-8054 高危前台无需认证 SQL 注入漏洞（Pre-auth SQL Injection）分析复现 [skip ci] 2026-06-08 20:34:30 +00:00
Copilot ab653515bb Add LuaN1aoAgent cognitive AI pentesting agent to tools list (#74) 
* docs: add BreachWeave and adscan to README.md

* add LuaN1aoAgent to README.md in tools section

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-08 21:07:07 +08:00
github-actions[bot] 8351d32c25 docs: 更新 1 篇文章 - 孚盟云CRM ProductSelect.aspx SQL注入漏洞 [skip ci] 2026-06-08 04:41:59 +00:00
github-actions[bot] 327e686ce8 docs: 更新 1 篇文章 - 孚盟云CRM ProductDetail.aspx SQL注入漏洞 [skip ci] 2026-06-07 04:26:11 +00:00
Copilot 038c80db76 Add Nginx HTTP/2 Bomb Exploit links to README.md (#73) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-06 12:52:16 +08:00
github-actions[bot] 6189766487 docs: 更新 1 篇文章 - 孚盟云CRM Product_field.aspx SQL注入漏洞 [skip ci] 2026-06-06 03:59:46 +00:00
github-actions[bot] 32e3427fec docs: 更新 1 篇文章 - 孚盟云CRM ProductList.aspx SQL注入漏洞 [skip ci] 2026-06-05 04:17:05 +00:00
Copilot 7460fb4b76 Add AssppJailbroken to IOT Device&Mobile Phone section in README.md (#72) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-04 23:55:50 +08:00
Copilot e62e6ea23d Add AgonySec/ThinkPHPGUI to README tools section (#71) 
* Add AgonySec/ThinkPHPGUI to README.md at line 1940

* Update ThinkPHPGUI entry in README.md with consistent capitalization

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-04 22:20:16 +08:00
github-actions[bot] 740254cca5 docs: 更新 1 篇文章 - 孚盟云CRM AjaxProductList.ashx SQL注入漏洞 [skip ci] 2026-06-04 04:42:49 +00:00
github-actions[bot] c0807ebc57 docs: 更新 1 篇文章 - 孚盟云CRM ProductGrid.aspx SQL注入漏洞 [skip ci] 2026-06-03 04:48:23 +00:00
github-actions[bot] 9d29d150c5 docs: 更新 1 篇文章 - 孚盟云CRM Price_detail.aspx SQL注入漏洞 [skip ci] 2026-06-02 11:51:29 +00:00
Copilot fcdbf59471 docs: add PrismSpace link to README (#70) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-06-01 21:56:10 +08:00
github-actions[bot] 68be5653c5 docs: 更新 1 篇文章 - 孚盟云CRM Inquiry.aspx SQL注入漏洞 [skip ci] 2026-06-01 04:50:49 +00:00
github-actions[bot] a6d696d4d2 docs: 更新 1 篇文章 - 孚盟云CRM LoadMailAttachFile.aspx 任意文件读取/移动 [skip ci] 2026-05-31 04:21:31 +00:00
dependabot[bot] db7fbca5ab Bump urllib3 from 1.26.5 to 2.7.0 in /discuz-ml-rce (#61) 
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.5 to 2.7.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/1.26.5...2.7.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-29 11:51:50 +08:00
Copilot 65db36acea docs: add TongWeb exploit and plugin links to README (#69) 
Co-authored-by: copilot-swe-agent[bot] <[email protected]>
 2026-05-29 11:51:18 +08:00
Copilot 68fff2a2db Add CIFSwitch link to Linux privilege escalation section in README (#68) 2026-05-29 10:15:36 +08:00
CopilotandMr-xn ad9d7a3adc docs: add Copy-Fail Kubernetes PoC link to CVE-2026-31431 entries (#66) 
Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/4adc4e93-692f-48d6-9e33-701e8aed23ca

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-25 16:17:25 +08:00
CopilotandMr-xn 87cce6fcf9 Add CACM (Linux权限维持+后渗透工具) to 提权辅助相关 section in README.md (#65) 
Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/822e18e0-a2c4-4caa-805a-66703dc4e9c1

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-23 08:31:34 +08:00
github-actions[bot] 12ce4a2f7b docs: 更新 1 篇文章 - 用友 NC 系统 IMsgCenterWebService SQL注入漏洞 [skip ci] 2026-05-18 04:11:16 +00:00
CopilotandMr-xn 05eeb7c991 docs: add zenproxy link to proxy tools list (#63) 
Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/4ce03e50-871c-425d-bb00-862c9e382d83

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-17 10:38:18 +08:00
Copilot 95422f6c72 docs: Add CVE-2026-34621 (Adobe Acrobat SSRF/JS injection) and CVE-2026-44578 (Next.js WebSocket SSRF) PoC links (#62) 2026-05-16 10:29:08 +08:00
github-actions[bot] e420f060fe docs: 更新 1 篇文章 - 孚盟云CRM BusiPriceOkPrint.aspx SQL注入漏洞 [skip ci] 2026-05-14 03:54:14 +00:00
github-actions[bot] f13cf8ec96 docs: 更新 1 篇文章 - 孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞 [skip ci] 2026-05-13 03:54:47 +00:00
github-actions[bot] 82a8f01e3c docs: 更新 1 篇文章 - 孚盟云CRM BusinessPriceOk.aspx SQL注入漏洞 [skip ci] 2026-05-12 03:45:37 +00:00
github-actions[bot] dc14de9c3b docs: 更新 1 篇文章 - 天地伟业Easy7 /Easy7/rest/user/getAuthorityByUserId SQL注入漏洞 [skip ci] 2026-05-11 04:02:00 +00:00
github-actions[bot] 881fc93d7c docs: 更新 1 篇文章 - 天地伟业Easy7 /Easy7/rest/user/IsPermissible SQL注入漏洞 [skip ci] 2026-05-10 03:51:38 +00:00
CopilotandMr-xn d25071d77d Add Dirty Frag to the Linux privilege escalation section in README (#60) 
* Add dirtyfrag to README

Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/44248c1a-9d5a-402f-ba64-9036e779bf70

Co-authored-by: Mr-xn <[email protected]>

* Fix Linux privilege escalation label in README

Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/44248c1a-9d5a-402f-ba64-9036e779bf70

Co-authored-by: Mr-xn <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-09 22:51:06 +08:00
github-actions[bot] 80cab04226 docs: 更新 1 篇文章 - 天地伟业Easy7 /Easy7/rest/user/getAuthorityByUserId SQL注入漏洞 [skip ci] 2026-05-09 03:35:51 +00:00
github-actions[bot] 4622982057 docs: 更新 1 篇文章 - 天地伟业Easy7 /Easy7/rest/file/download 文件读取漏洞 [skip ci] 2026-05-08 03:35:42 +00:00
github-actions[bot] bff8f1fe13 docs: 更新 1 篇文章 - 天地伟业Easy7 /Easy7/rest/file/deleteFile 文件删除漏洞 [skip ci] 2026-05-07 03:41:32 +00:00
github-actions[bot] 806f6470b1 docs: 更新 1 篇文章 - 天地伟业Easy7 /Easy7/rest/file/uploadFile 文件上传漏洞 [skip ci] 2026-05-06 03:41:59 +00:00
Copilot 70006014fc docs: add Pentest-Swarm-AI to README tools section (#59) 2026-05-03 12:16:56 +08:00
CopilotandMr-xn 793ee1744a docs: add GBitsTools, GbitsGen, ghost-bits-lab, BLACKHAT_Asia2026 to README (#58) 
Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/0849d964-f623-4c6b-ba08-14871344023b

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
 2026-05-01 14:11:12 +08:00
github-actions[bot] db611dcf17 docs: 更新 1 篇文章 - 孚盟云CRM BusinessPriceListList.aspx SQL注入漏洞 [skip ci] 2026-05-01 03:54:57 +00:00
东方有鱼名为咸 46e8295c0b add Asia-26-Bai-Cast-Attack-Ghost-Bits-4.23.pdf 2026-04-30 20:44:55 +08:00
CopilotMr-xn东方有鱼名为咸
 		e0a901b72a Add Java Ghost Bits (Black Hat Asia 2026) links to IOT section (#57) 
* add Cast Attack Ghost Bits links to IOT section in README

Agent-Logs-Url: https://github.com/Mr-xn/Penetration_Testing_POC/sessions/2e561877-1b4a-42d6-bac7-b9c5b95a091e

Co-authored-by: Mr-xn <[email protected]>

* Update README with new links and resources

* Update README with new CVE links and descriptions

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Mr-xn <[email protected]>
Co-authored-by: 东方有鱼名为咸 <[email protected]>
 2026-04-30 20:23:42 +08:00
github-actions[bot] eb74e0c978 docs: 更新 1 篇文章 - 孚盟云CRM BusinessPrice.aspx SQL注入漏洞 [skip ci] 2026-04-30 03:42:16 +00:00
github-actions[bot] 0451098613 docs: 更新 1 篇文章 - 孚盟云CRM ClientNameCard.aspx SQL注入漏洞 [skip ci] 2026-04-29 03:40:54 +00:00
github-actions[bot] 9dc3e13da4 docs: 更新 1 篇文章 - 孚盟云CRM CustomizeReportSelectMould.aspx SQL注入漏洞 [skip ci] 2026-04-28 03:43:08 +00:00
github-actions[bot] 40804140d2 docs: 更新 1 篇文章 - 天地伟业Easy7 /Easy7/rest/file/uploadIdsHttpFile SSRF+文件写入漏洞 [skip ci] 2026-04-27 03:38:30 +00:00