openkylin
/
attack-defense-think-tank
mirror of https://gitee.com/openkylin/attack-defense-think-tank.git
9
0
Fork 0
Code Issues Projects Releases Wiki Activity

!144 update Web安全/README.md. 

Merge pull request !144 from Set3r.Pan/master
This commit is contained in:
Set3r.Pan 2022-11-29 13:23:06 +00:00 committed by Gitee
parent 555dfaa709 495e2083c1
commit 95e829668d
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
5 changed files with 35 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
Web安全/README.md
View File

@ -10,8 +10,15 @@ Only for research or learning, **DO NOT USE IT FOR ILLEGAL PURPOSES!**
## 目录
  :fa-tags: [0x01 记一次捕获野生0day](./docs/0x01%20记一次捕获野生0day.md)
  :fa-tags: [0x02 Shiro-550漏洞 （CVE-2016-4437）分析](./docs/0x02%20Shiro-550%E6%BC%8F%E6%B4%9E%20%EF%BC%88CVE-2016-4437%EF%BC%89%E5%88%86%E6%9E%90.md)
  :fa-tags: [0x03 一次用友NC BshServlet拿webshell过程](./docs/0x03%20%E4%B8%80%E6%AC%A1%E7%94%A8%E5%8F%8BNC%20BshServlet%E6%8B%BFwebshell%E8%BF%87%E7%A8%8B.md)
  :fa-tags: [0x04 Apache Log4j2漏洞详解](./docs/0x04%20Apache%20Log4j2漏洞详解.md)
  :fa-tags: [0x05 敏感信息泄露+用户遍历=任意密码修改](./docs/0x05%20敏感信息泄露+用户遍历=任意密码修改.md)
  :fa-tags: [0x06 溯源反制之MySQL蜜罐研究](./docs/0x06%20%20溯源反制之MySQL蜜罐研究.md)
  :fa-tags: [0x06 溯源反制之MySQL蜜罐研究](./docs/0x06%20溯源反制之MySQL蜜罐研究.md)

7
内网安全/README.md
View File

@ -11,8 +11,13 @@ Only for research or learning, **DO NOT USE IT FOR ILLEGAL PURPOSES!**
## 目录
  :fa-tags: [0x01 内网渗透之代理转发姿势](./docs/0x01%20内网渗透之代理转发姿势.md)
  :fa-tags: [0x02 使用Venom搭建二级代理](./docs/0x02%20使用Venom搭建二级代理.md)
  :fa-tags: [0x03 隐藏通信隧道技术（一）](./docs/0x03%20隐藏通信隧道技术（一）.md)
  :fa-tags: [0x04 隐藏通信隧道技术（二）](./docs/0x04%20隐藏通信隧道技术（二）.md)
  :fa-tags: [0x05 利用msfvenom生成木马](./docs/0x05%20利用msfvenom生成木马.md)
  :fa-tags: [0x06 利用msf自带的route模块穿透目标内网](./docs/0x06%20利用msf自带的route模块穿透目标内网.md)
  :fa-tags: [0x06 利用msf自带的route模块穿透目标内网](./docs/0x06%20利用msf自带的route模块穿透目标内网.md)

8
干货总结/README.md
View File

@ -9,11 +9,17 @@ Collect relevant technical experience precipitation and dry goods summary of eac
Only for research or learning, **DO NOT USE IT FOR ILLEGAL PURPOSES!**
## 目录
  :fa-tags: [0x01 命令注入漏洞总结篇](./docs/0x01%20命令注入漏洞总结篇.md)
  :fa-tags: [0x01 命令注入漏洞总结篇](./docs/0x01%20命令注入漏洞总结篇.md)
  :fa-tags: [0x02 二十八种未授权访问漏洞合集](./docs/0x02%20二十八种未授权访问漏洞合集.md)
  :fa-tags: [0x03 Nginx之常见加固指南](./docs/0x03%20Nginx之常见加固指南.md)
  :fa-tags: [0x04 Linux后门总结-SSH利用篇](./docs/0x04%20Linux后门总结-SSH利用篇.md)
  :fa-tags: [0x05 Linux后门总结-各类隐藏技能](./docs/0x05%20Linux后门总结-各类隐藏技能.md)
  :fa-tags: [0x06 Linux后门总结-系统服务利用](./docs/0x06%20Linux后门总结-系统服务利用.md)
  :fa-tags: [0x07 kubernetes集群渗透测试](./docs/0x07%20kubernetes集群渗透测试.md)

4
技术沙龙/README.md
View File

@ -10,5 +10,7 @@ Only for research or learning,**DO NOT USE IT FOR ILLEGAL PURPOSES!**
## 目录
  :fa-tags: [0x01 近源攻击案例与思考分享](./docs/0x01%20近源攻击案例与思考分享.md)
  :fa-tags: [0x02 Eloma-rootkit改写之路](./docs/0x02%20Eloma-rootkit改写之路.md)
  :fa-tags: [0x03 netlink通信机制研究及内核攻击利用](./docs/0x03%20netlink通信机制研究及内核攻击利用.md)
  :fa-tags: [0x03 netlink通信机制研究及内核攻击利用](./docs/0x03%20netlink通信机制研究及内核攻击利用.md)

12
终端安全/README.md
View File

@ -10,13 +10,23 @@ Only for research or learning, **DO NOT USE IT FOR ILLEGAL PURPOSES!**
## 目录
  :fa-tags: [0x01 WPS For Linux存在代码执行漏洞（CNVD-2022-21863）](./docs/0x01%20WPS%20For%20Linux存在代码执行漏洞（CNVD-2022-21863）.md)
  :fa-tags: [0x02 Sudo权限绕过漏洞（CVE-2019-14287）](./docs/0x02%20Sudo权限绕过漏洞（CVE-2019-14287）.md)
  :fa-tags: [0x03 Linux Kernel openvswitch模块提权漏洞（CVE-2022-2639）](./docs/0x03%20Linux%20Kernel%20openvswitch模块提权漏洞（CVE-2022-2639）.md)
  :fa-tags: [0x04 Polkit提权漏洞（CVE-2021-4034）](./docs/0x04%20Polkit提权漏洞（CVE-2021-4034）.md)
  :fa-tags: [0x05 Linux Kernel DirtyPipe提权漏洞（CVE-2022-0847）](./docs/0x05%20Linux%20Kernel%20DirtyPipe提权漏洞（CVE-2022-0847）.md)
  :fa-tags: [0x06 Sudo本地提权漏洞（CVE-2021-3156）](./docs/0x06%20Sudo本地提权漏洞（CVE-2021-3156）.md)
  :fa-tags: [0x07 Linux Netfilter缓冲区溢出漏洞（CVE-2022-34918）](./docs/0x07%20Linux%20Netfilter缓冲区溢出漏洞（CVE-2022-34918）.md)
  :fa-tags: [0x08 Linux Kernel 权限提升漏洞（CVE-2022-2588）](./docs/0x08%20Linux%20Kernel%20权限提升漏洞（CVE-2022-2588）.md)
  :fa-tags: [0x09 麒麟传书远程代码执行漏洞（KVE-2022-1002）](./docs/0x09%20麒麟传书远程代码执行漏洞（KVE-2022-1002）.md)
  :fa-tags: [0x10 kylin-activation任意文件写入漏洞（KVE-2022-0231）](./docs/0x10%20kylin-activation任意文件写入漏洞（KVE-2022-0231）.md)
  :fa-tags: [0x11 AFLplusplus入门-实战化挖掘vim漏洞](https://gitee.com/openkylin/attack-defense-think-tank/blob/master/%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8/docs/0x11%20AFLplusplus%E5%85%A5%E9%97%A8-%E5%AE%9E%E6%88%98%E5%8C%96%E6%8C%96%E6%8E%98vim%E6%BC%8F%E6%B4%9E.md)
  :fa-tags: [0x11 AFLplusplus入门-实战化挖掘vim漏洞](https://gitee.com/openkylin/attack-defense-think-tank/blob/master/%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8/docs/0x11%20AFLplusplus%E5%85%A5%E9%97%A8-%E5%AE%9E%E6%88%98%E5%8C%96%E6%8C%96%E6%8E%98vim%E6%BC%8F%E6%B4%9E.md)