{"id":13843739,"url":"https://github.com/hanc00l/some_pocsuite","last_synced_at":"2025-07-11T19:33:33.660Z","repository":{"id":37743160,"uuid":"163027671","full_name":"hanc00l/some_pocsuite","owner":"hanc00l","description":"用于漏洞排查的pocsuite3验证POC代码","archived":true,"fork":false,"pushed_at":"2022-08-07T01:30:13.000Z","size":4614,"stargazers_count":345,"open_issues_count":0,"forks_count":96,"subscribers_count":18,"default_branch":"master","last_synced_at":"2024-08-05T17:39:07.086Z","etag":null,"topics":["poc","pocsuite"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hanc00l.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-12-24T22:45:41.000Z","updated_at":"2024-06-27T21:35:04.000Z","dependencies_parsed_at":"2022-07-12T16:44:27.875Z","dependency_job_id":null,"html_url":"https://github.com/hanc00l/some_pocsuite","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hanc00l%2Fsome_pocsuite","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hanc00l%2Fsome_pocsuite/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hanc00l%2Fsome_pocsuite/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hanc00l%2Fsome_pocsuite/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hanc00l","download_url":"https://codeload.github.com/hanc00l/some_pocsuite/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225755125,"owners_count":17519206,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["poc","pocsuite"],"created_at":"2024-08-04T17:02:25.781Z","updated_at":"2024-11-21T15:31:28.733Z","avatar_url":"https://github.com/hanc00l.png","language":"Python","funding_links":[],"categories":["Python","Python (1887)"],"sub_categories":[],"readme":"# some_pocsuite\n\n\n\n用于企业内部进行漏洞排查与验证的的pocsuite3验证POC代码（pocsuite3是知道创宇安全团队的开源漏洞测试框架）。\n\n由于原Pocsuite已停止更新，因此将原来的POC代码全部重新改写并迁移到pocsuite3，原POC备份在PocsuiteV2中。\n\n\n\n因将POC转向Nuclei的YAML方式，后续不再更新（2022年8月）。 \n\n\n\n## 插件代码编写\n\n使用pocsuite3 漏洞测试框架，插件编写请参考 pocsuite3 项目插件编写要求。\n\n[PoC 编写规范及要求说明](https://github.com/knownsec/pocsuite3/blob/master/docs/CODING.md)\n\n| 序号 | poc                                     | 说明                                                         |\n| ---- | --------------------------------------- | ------------------------------------------------------------ |\n| 1    | hikvision-2013-4976_web_login-bypass.py | 海康威视cve-2013-4976匿名登录验证绕过                        |\n| 2    | weblogic-vul-check_all_rce.py           | weblogic反序列化漏洞（CVE-2016-0638，CVE-2016-3510，CVE-2017-3248，CVE-2018-2628，CVE-2018-2893, CVE-2019-2890） |\n| 3    | weblogic-wls-2017-10271_all_rce.py      | weblogic WLS组件反序列化漏洞CVE-2017-10271                   |\n| 4    | zookeeper_all_unauthorized.py           | zookeeper未授权访问                                          |\n| 5    | redis_all_unauthorized.py               | redis未授权访问（ [pocsuite_poc_collect](https://github.com/njcx/pocsuite_poc_collect)） |\n| 6    | memcached_all_unauthorized.py           | memchached未授权访问                                         |\n| 7    | snmp_v2_unauthorized.py                 | snmp未授权访问（需要安装pysnmp模块）                         |\n| 8    | iis-ms15-034_7_rce.py                   | IIS（CVE-2015-1635，MS15-034）Check Script                   |\n| 9    | iis-shortname_6_disclosure.py           | IIS Tilde Vulnerability (IIS Shortname) Check                |\n| 10   | rdp-ms12-020_all_rce.py                 | MS12-020/CVE-2012-0002 Vulnerability Tester                  |\n| 11   | windows-ms14-066_all_rce.py             | winshock (MS14-066) Vulnerability Tester                     |\n| 12   | weblogic-async-2019-2725_all_rce.py     | weblogic async反序列化(CVE-2019-2725)Vulnerability Tester (POP: jdk7u21) |\n| 13   | rdp-2019-0708_all_rce.py                | windows RDP RCE Vulnerability（CVE-2019-0708）Check (by  robertdavidgraham/rdpscan) |\n| 14   | weblogic-ssrf_all_ssrf.py               | WebLogic SSRF And XSS(CVE-2014-4241, CVE-2014-4210, CVE-2014-4242) check POC |\n| 15   | webmin_1.92_rce.py                      | Webmin 1.920 Unauthenticated Remote Code Execution（CVE-2019-15107）check POC by jerome |\n| 16   | solr_8.3.1_rce.py                       | Apache Solr Velocity 注入远程命令执行漏洞 (CVE-2019-17558) check POC by jerome |\n| 17   | supervisord-2017-11610_3_rce.py         | CVE-2017-11610 Supervisord 远程命令执行漏洞 check POC by kcat |\n| 18   | tomcat-ajp-ghostcat_all_lfi.py          | CNVD-2020-10487/CVE-2020-1938  TomcatAJP任意文件读取/包含漏洞 check POC by rootk1t |\n| 19   | f5-CVE-2020-5902_all_rce.py             | CVE-2020-5902 BIG-IP TMUI RCE漏洞 check POC                  |\n| 20  | weblogic-iiop-2020-2551_all_rce.py             | CVE-2020-2551 Weblogic IIOP反序列化漏洞 check POC by rootk1t |\n| 21  | weblogic-console-2020-14882_all_rce.py      | CVE-2020-14882 Weblogic Unauthorized bypass RCE check POC|\n| 22  | flink-CVE-2020-17519_1.11.2_fileread.py      | CVE-2020-17519 Apache Flink目录穿越漏洞 check POC|\n| 23  | flink-CVE-2020-17518_1.11.2_rce.py      | CVE-2020-17518 Apache Flink任意文件写漏洞导致RCE|\n| 24  | springboot-actuator_all_unauthorized.py      | SpringBoot Actuator配置信息未授权访问 check Poc|\n| 25  | vmware-vcenter-FileUpload_CVE-2021-22005_rce.py      | VMware vCenter Server未授权任意文件上传漏洞CVE-2021-22005 check Poc by knownsec|\n| 26  | gitlab-upload-2021-22205_13.10.2_rce.py      | CVE-2021-22205 Gitlab Upload RCE check Poc by Wing|\n\n陆续扩充中...\n\n\n\n## 参考\n\n- [Pocsuite3](https://github.com/knownsec/pocsuite3/)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhanc00l%2Fsome_pocsuite","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhanc00l%2Fsome_pocsuite","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhanc00l%2Fsome_pocsuite/lists"}