Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/pochubs/pochubs
PocHubs是为了整合网上知名开源框架的漏洞详细和POC
https://github.com/pochubs/pochubs
Last synced: about 2 months ago
JSON representation
PocHubs是为了整合网上知名开源框架的漏洞详细和POC
- Host: GitHub
- URL: https://github.com/pochubs/pochubs
- Owner: pochubs
- Created: 2019-06-17T06:18:58.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2019-06-19T08:25:14.000Z (over 5 years ago)
- Last Synced: 2024-08-04T23:10:48.186Z (5 months ago)
- Homepage:
- Size: 939 KB
- Stars: 234
- Watchers: 15
- Forks: 62
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- awesome-security-collection - **192**星
README
# PocHubs
PocHubs是为了整合网上知名开源框架的漏洞详细和POC，目前计划完善的是ThinkPHP、WordPress等平台。
### ThinkPHP
使用方法：
```bash
# 进入网站根目录，如 /var/www/
cd /var/www
# 创建 thinkphp5 目录 tp5 ，拉取 thinkphp5 代码
git clone https://github.com/top-think/framework.git /var/www/tp5
# 创建 thinkphp3 目录 tp3 ，拉取 thinkphp3 代码
git clone https://github.com/top-think/thinkphp.git /var/www/tp3
```
详细漏洞列表可查看 [`ThinkPHP.md`](ThinkPHP.md)
目前已收录
| ThinkPHP3 | ThinkPHP5 |
| ------------------------------------------------------------ | ------------------------------------------------------------ |
| [ThinkPHP3.2.3_缓存函数设计缺陷可导致Getshell](ThinkPHP.md#thinkphp323_缓存函数设计缺陷可导致getshell) | [ThinkPHP5_SQL注入漏洞&&敏感信息泄露](ThinkPHP.md#thinkphp5_sql注入漏洞敏感信息泄露) |
| [ThinkPHP3.2.3_最新版update注入漏洞](ThinkPHP.md#thinkphp323_最新版update注入漏洞) | [ThinkPHP5.0.10缓存函数设计缺陷可导致Getshell ](ThinkPHP.md#thinkphp5010-323_缓存函数设计缺陷可导致getshell) |
| [ThinkPHP3.2.X_find_select_delete注入](ThinkPHP.md#thinkphp32x_find_select_delete注入) | [ThinkPHP框架5.0.X_sql注入漏洞分析](ThinkPHP.md#thinkphp框架50x_sql注入漏洞分析) |
| [ThinkPHP3.X_order_by注入漏洞](ThinkPHP.md#thinkphp3x_order_by注入漏洞) | [ThinkPHP5.X_order_by注入漏洞](ThinkPHP.md#thinkphp5x_order_by注入漏洞) |
| | [ThinkPHP5.X_远程代码执行](ThinkPHP.md#thinkphp5x_远程代码执行) |
### WordPress
使用方法：
```bash
# 进入网站根目录，如 /var/www/
cd /var/www
# 创建 wordpress 目录 wp ，并拉取 wordpress 代码
git clone https://github.com/WordPress/WordPress.git /var/www/wp
```
详细漏洞列表可查看 [`WordPress.md`](WordPress.md)
目前未整合