不再关注网络安全
# Google Dork: inurl:* "auditing.txt" # Files Containing Juicy Info # Date: 16/02/2024 # Exploit: Gautam Rawat
# Google Dork: intitle:"index of" cgi.pl # Files Containing Juicy Info # Date: 16/02/2024 # Exploit: Gautam Rawat
# Google Dork: intext:Powered by 2Moons 2009-2013 # 2Moons - Multiple Vulnerabilities # This dork is linked to the following existing exploit: # https://www.exploit-db.com/exploits/37713 [*] Date: 26/06/2020 [*] Twitter Handle: VanshalG [*] Author...
# Google Dork: inurl:/webmail intext:Tecnologia fornecida por IceWarp Server # IceWarp WebMail 11.4.4.1 and older version - Reflective Cross-Site Scripting. # This dork is linked to the following existing exploit: # https://www.exploit-db.com/expl...
PowerShell Reverse TCP 用于连接到远程主机的PowerShell脚本,远程主机将完全控制客户端的PowerShell及其所有基础命令,这也算是反弹Shell的一种。 已在Windows 10 Enterprise OS(64位)上使用PowerShell v5.1.18362.752测试。 PowerShell Reverse TCP 如何使用 项目地址:https://github.com/ivan-sincek/powershell-...
Dork : intitle:index.of "backwpup" AuthorGaurav Solanki (@heydarklord)
可用于识别杀软,在免杀或程序处理中会用到: { "360tray.exe": "360安全卫士-实时保护", "360safe.exe": "360安全卫士-主程序", "ZhuDongFangYu.exe": "360安全卫士-主动防御", "360sd.exe": "360杀毒", "a2guard.exe": "a-squared杀毒", "ad-watch.exe": "Lavasoft杀毒", ...
Cobalt Strike 渗透神器 CobatStrike是一款基于java编写的全平台多方协同后渗透测试攻击框架。CobaltStrike集成了端口转发、端口扫描、socket代理、提权、钓鱼、木马、远程控制等功能。该工具几乎覆盖了APT攻击链中所需要用到的各个技术环节。它是收费软件,特殊版本请在本站搜索CobaltStrike。 AggressorScripts 脚本 在Cobal...