Skip to content

Latest commit

 

History

History
 
 

Goby&poc

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
AceNet_AceReporter_Report_component_Arbitrary_file_download.go
AceNet_AceReporter_Report_component_Arbitrary_file_download.go
 
 
Active_UC_index.action_RCE.json
Active_UC_index.action_RCE.json
 
 
Apache_2.4.49_Path_Traversal_CVE_2021_41773.json
Apache_2.4.49_Path_Traversal_CVE_2021_41773.json
 
 
Apache_2.4.49_RCE_CVE_2021_41773_and_2.4.50_CVE_2021_42013.json
Apache_2.4.49_RCE_CVE_2021_41773_and_2.4.50_CVE_2021_42013.json
 
 
Apache_APISIX_Dashboard_CVE_2021_45232.json
Apache_APISIX_Dashboard_CVE_2021_45232.json
 
 
Apache_Druid_Arbitrary_File_Read_CVE_2021_36749.json
Apache_Druid_Arbitrary_File_Read_CVE_2021_36749.json
 
 
Atlassian_Confluence_OGNL_injection_CVE_2021_26084.json
Atlassian_Confluence_OGNL_injection_CVE_2021_26084.json
 
 
Atlassian_Confluence_Webwork_OGNL_Inject_CVE_2022_26134.go
Atlassian_Confluence_Webwork_OGNL_Inject_CVE_2022_26134.go
 
 
China_Mobile_Yu_Routing_Sensitive_Information_Leaks_Vulnerability.json
China_Mobile_Yu_Routing_Sensitive_Information_Leaks_Vulnerability.json
 
 
China_Mobile_Yu_routed_the_login_bypass.json
China_Mobile_Yu_routed_the_login_bypass.json
 
 
D_Link_DIR_868L_getcfg.php_Account_password_leakage.json
D_Link_DIR_868L_getcfg.php_Account_password_leakage.json
 
 
D_Link_ShareCenter_DNS_320_RCE.json
D_Link_ShareCenter_DNS_320_RCE.json
 
 
F5_BIG_IP_login_bypass_CVE_2022_1388.go
F5_BIG_IP_login_bypass_CVE_2022_1388.go
 
 
FLIR_AX8_Arbitrary_File_Download_Vulnerability_CNVD-2021-39018.go
FLIR_AX8_Arbitrary_File_Download_Vulnerability_CNVD-2021-39018.go
 
 
FineReport_Directory_traversal.json
FineReport_Directory_traversal.json
 
 
Finetree_5MP_default_password_or_Unauthorized_user_added.json
Finetree_5MP_default_password_or_Unauthorized_user_added.json
 
 
ForgeRock_AM_RCE_CVE_2021_35464.go
ForgeRock_AM_RCE_CVE_2021_35464.go
 
 
GitLab_SSRF_CVE_2021_22214.json
GitLab_SSRF_CVE_2021_22214.json
 
 
Grafana_Arbitrary_file_read.json
Grafana_Arbitrary_file_read.json
 
 
H3C_IMC_RCE.json
H3C_IMC_RCE.json
 
 
H5S_video_platform_GetSrc_information_leakage.json
H5S_video_platform_GetSrc_information_leakage.json
 
 
H5S_video_platform_GetUserInfo_Account_password_leakage.json
H5S_video_platform_GetUserInfo_Account_password_leakage.json
 
 
HEJIA_PEMS_SystemLog.cgi_Arbitrary_file_download.go
HEJIA_PEMS_SystemLog.cgi_Arbitrary_file_download.go
 
 
Holographic_AI_network_operation_and_maintenance_platform_RCE.go
Holographic_AI_network_operation_and_maintenance_platform_RCE.go
 
 
IRDM4000_Smart_station_Unauthorized_access.json
IRDM4000_Smart_station_Unauthorized_access.json
 
 
IceWarp_WebClient_basic_RCE.json
IceWarp_WebClient_basic_RCE.json
 
 
JEEWMS_Arbitrary_File_Read_Vulnerability.go
JEEWMS_Arbitrary_File_Read_Vulnerability.go
 
 
JQuery_1.7.2Version_site_foreground_arbitrary_file_download.json
JQuery_1.7.2Version_site_foreground_arbitrary_file_download.json
 
 
Jinher_OA_C6_download.jsp_Arbitrary_file_read.json
Jinher_OA_C6_download.jsp_Arbitrary_file_read.json
 
 
Jitong_EWEBS_arbitrary_file_read.json
Jitong_EWEBS_arbitrary_file_read.json
 
 
Jitong_EWEBS_phpinfo_leak.json
Jitong_EWEBS_phpinfo_leak.json
 
 
KEDACOM_MTS_transcoding_server_Arbitrary_file_download_CNVD_2020_48650.json
KEDACOM_MTS_transcoding_server_Arbitrary_file_download_CNVD_2020_48650.json
 
 
Kyan_Account_password_leak.json
Kyan_Account_password_leak.json
 
 
Kyan_run.php_RCE.json
Kyan_run.php_RCE.json
 
 
Lanproxy_Directory_traversal_CVE_2021_3019.json
Lanproxy_Directory_traversal_CVE_2021_3019.json
 
 
Leadsec_ACM_information_leakage_CNVD_2016_08574.json
Leadsec_ACM_information_leakage_CNVD_2016_08574.json
 
 
Longjing_Technology_BEMS_API_1.21_Remote_Arbitrary_File_Download.go
Longjing_Technology_BEMS_API_1.21_Remote_Arbitrary_File_Download.go
 
 
MPSec_ISG1000_Security_Gateway_Arbitrary_File_Download_Vulnerability.json
MPSec_ISG1000_Security_Gateway_Arbitrary_File_Download_Vulnerability.json
 
 
Many_network_devices_have_arbitrary_file_downloads.go
Many_network_devices_have_arbitrary_file_downloads.go
 
 
Many_network_devices_have_password_leaks.go
Many_network_devices_have_password_leaks.go
 
 
Metabase_geojson_Arbitrary_file_reading_CVE_2021_41277.json
Metabase_geojson_Arbitrary_file_reading_CVE_2021_41277.json
 
 
Micro_module_monitoring_system_User_list.php_information_leakage.json
Micro_module_monitoring_system_User_list.php_information_leakage.json
 
 
NVS3000_integrated_video_surveillance_platform_is_not_accessible.go
NVS3000_integrated_video_surveillance_platform_is_not_accessible.go
 
 
Node_red_UI_base_Arbitrary_File_Read_Vulnerability_CVE_2021_3223.go
Node_red_UI_base_Arbitrary_File_Read_Vulnerability_CVE_2021_3223.go
 
 
OpenSNS_RCE.json
OpenSNS_RCE.json
 
 
README.md
README.md
 
 
SDWAN_smart_gateway_weak_password.json
SDWAN_smart_gateway_weak_password.json
 
 
SPON_IP_network_intercom_broadcast_system_exportrecord.php_any_file_download.go
SPON_IP_network_intercom_broadcast_system_exportrecord.php_any_file_download.go
 
 
SPON_IP_network_intercom_broadcast_system_getjson.php_Arbitrary_file_read.go
SPON_IP_network_intercom_broadcast_system_getjson.php_Arbitrary_file_read.go
 
 
SPON_IP_network_intercom_broadcast_system_ping.php_RCE.go
SPON_IP_network_intercom_broadcast_system_ping.php_RCE.go
 
 
SPON_IP_network_intercom_broadcast_system_rj_get_token.php_any_file_read.go
SPON_IP_network_intercom_broadcast_system_rj_get_token.php_any_file_read.go
 
 
Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__ping_RCE.go
Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__ping_RCE.go
 
 
Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__tracert_RCE.go
Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__tracert_RCE.go
 
 
ShopXO_download_Arbitrary_file_read_CNVD_2021_15822.json
ShopXO_download_Arbitrary_file_read_CNVD_2021_15822.json
 
 
TamronOS_IPTV_Arbitrary_file_download.json
TamronOS_IPTV_Arbitrary_file_download.json
 
 
TamronOS_IPTV_RCE.json
TamronOS_IPTV_RCE.json
 
 
Tianwen_ERP_system__uploadfile.aspx_Arbitraryvfilevupload.json
Tianwen_ERP_system__uploadfile.aspx_Arbitraryvfilevupload.json
 
 
TopSec_Reporter_Arbitrary_file_download_CNVD_2021_41972.go
TopSec_Reporter_Arbitrary_file_download_CNVD_2021_41972.go
 
 
Tuchuang_Library_System_Arbitrary_Reading_File_CNVD_2021_34454.go
Tuchuang_Library_System_Arbitrary_Reading_File_CNVD_2021_34454.go
 
 
Weaver_e_office_UploadFile.php_file_upload_CNVD_2021_49104.json
Weaver_e_office_UploadFile.php_file_upload_CNVD_2021_49104.json
 
 
Webgrind_File_read_cve_2018_12909.go
Webgrind_File_read_cve_2018_12909.go
 
 
ZhongQing_naibo_Education_Cloud_Platform_Information_leakage.go
ZhongQing_naibo_Education_Cloud_Platform_Information_leakage.go
 
 
ZhongQing_naibo_Education_Cloud_platform_reset_password.go
ZhongQing_naibo_Education_Cloud_platform_reset_password.go
 
 
chanjet_CRM_get_usedspace.php_sql_injection.json
chanjet_CRM_get_usedspace.php_sql_injection.json
 
 
dahua_DSS_Arbitrary_file_download_cnvd_2020_61986.go
dahua_DSS_Arbitrary_file_download_cnvd_2020_61986.go
 
 
fahuo100_sql_injection_CNVD_2021_30193.json
fahuo100_sql_injection_CNVD_2021_30193.json
 
 
firewall_Leaked_user_name_and_password.json
firewall_Leaked_user_name_and_password.json
 
 
landray_oa_treexml_rce.go
landray_oa_treexml_rce.go
 
 
sangfor_Behavior_perception_system_c.php_RCE.json
sangfor_Behavior_perception_system_c.php_RCE.json
 
 
xiaomi_Mi_wiFi_From_File_Read_To_Login_CVE_2019_18370.go
xiaomi_Mi_wiFi_From_File_Read_To_Login_CVE_2019_18370.go
 
 
yongyou_NC_bsh.servlet.BshServlet_RCE.json
yongyou_NC_bsh.servlet.BshServlet_RCE.json
 
 

README.md

该目录为Goby的POC

  1. 中科网威、锐捷、网域多个设备的防火墙控制系统 存在账号密码泄露漏洞 poc&exp
  2. H3C IMC远程命令执行 poc&exp
  3. 用友 NC bsh.servlet.BshServlet 远程命令执行漏洞 poc&exp
  4. ShopXO download 任意文件读取漏洞 CNVD-2021-15822 poc&exp
  5. 发货100-虚拟商品自动发货系统_sql_injection_CNVD_2021_30193 poc
  6. 深信服 行为感知系统 c.php 远程命令执行漏洞 poc
  7. Finetree-5MP-摄像机 默认口令 未授权任意用户添加 poc
  8. 迈普 ISG1000安全网关 任意文件下载漏洞 poc
  9. D-Link ShareCenter DNS-320 system_mgr.cgi 远程命令执行漏洞 poc&exp
  10. 金和OA C6 download.jsp 任意文件读取漏洞 poc
  11. TamronOS IPTV系统任意文件下载 poc&exp
  12. FineReport（帆软）报表系统目录遍历漏洞 poc
  13. 浙江大华技术股份有限公司大华DSS系统存在任意文件下载漏洞 poc&exp
  14. TamronOS IPTV系统存在前台命令执行漏洞 poc&exp
  15. 极通EWEBS任意文件读取 poc&exp
  16. 极通EWEBS testweb.php 敏感信息泄露漏洞 poc
  17. Kyan 网络监控设备 账号密码泄露 poc
  18. Kyan 网络监控设备 run.php 远程命令执行漏洞 poc&exp
  19. IceWarp WebClient basic 远程命令执行漏洞 poc&exp
  20. SDWAN智能网关应用系统弱口令 poc
  21. JQuery 1.7.2版本站点前台任意文件下载漏洞 poc&exp
  22. Lanproxy目录遍历 CVE-2021-3019 poc&exp
  23. Active UC index.action 远程命令执行漏洞 poc&exp
  24. OpenSNS 远程代码执行漏洞 poc&exp
  25. 中国移动 禹路由登录绕过 poc
  26. 中国移动 禹路由敏感信息泄露 poc
  27. GitLab SSRF漏洞 CVE-2021-22214(扫描出来后请使用验证模块验证，URL处输入dnslog的URL查看是否有数据) poc
  28. 小米系列路由器远程任意文件读取漏洞（CVE-2019-18371）poc&exp
  29. Node-RED ui base 任意文件读取漏洞 CVE-2021-3223 poc&exp
  30. 图创图书馆集群管理系统存在任意文件读取漏洞 CNVD-2021-34454 poc&exp
  31. ForgeRock OpenAM 远程代码执行漏洞 (CVE-2021-35464) poc&exp 误报率有点高，请务必验证返回信息
  32. FLIR-AX8存在任意文件下载漏洞 poc&exp
  33. jeewms存在未授权任意文件读取漏洞 poc&exp
  34. 中庆纳博教育云平台敏感信息泄露 poc&exp
  35. 中庆纳博教育云平台未授权密码重置漏洞 poc&exp 请谨慎利用，会重置账号密码
  36. 多家网络设备存在账号密码泄露、任意文件下载
  37. 天融信Reporter任意文件下载 poc&exp
  38. 大唐电信科技股份有限公司NVS3000综合视频监控平台 未授权访问 poc
  39. 全息AI网络运维平台 RCE poc&exp
  40. 龙璟科技BEMS API 1.21 Remote Arbitrary File Download poc&exp
  41. AceNet AceReporter报表组件涉及防火墙任意文件下载 poc&exp
  42. Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__ping_RCE poc&exp
  43. Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__tracert_RCE poc&exp
  44. SPON IP网络对讲广播系统 exportrecord.php 任意文件下载 poc&exp
  45. SPON IP网络对讲广播系统 getjson.php 任意文件读取 poc&exp
  46. SPON IP网络对讲广播系统 rj_get_token.php任意文件读取 poc&exp
  47. SPON IP网络对讲广播系统 ping.php RCE poc&exp
  48. 和嘉科技 PEMS SystemLog.cgi 任意文件下载 poc&exp
  49. CVE-2021-26084：Confluence OGNL 注入漏洞
  50. 微模块机房动力环境监控系统 信息泄露
  51. Apache HTTP服务目录遍历 (CVE-2021-41773)
  52. Apache 2.4.49-2.4.50 RCE
  53. 畅捷CRM SQL注入
  54. 网御网上行为管理系统Leadsec ACM信息泄露
  55. 天问物业ERP系统 任意文件上传poc&exp
  56. iRDM4000智慧站房 越权访问 poc
  57. Apache Druid Arbitrary File Read (CVE-2021-36749)
  58. D-Link-DIR-868L getcfg.php Account password leakage
  59. KEDACOM MTS transcoding server Arbitrary file download CNVD-2020-48650
  60. H5S视频平台 信息泄露密码泄露
  61. Metabase geojson 任意文件读取漏洞 CVE-2021-41277
  62. 泛微v9.0 e-office UploadFile.php CNVD-2021-49104
  63. Grafan 任意文件读取
  64. Apache_APISIX_Dashboard_CVE_2021_45232.json
  65. F5-BIGIP iControl REST绕过授权访问漏洞 CVE_2022_1388
  66. Atlassian Confluence 远程代码执行(CVE-2022-26134)
  67. Webgrind 1.5版本 文件读取漏洞
  68. 蓝凌OA treexml.tmpl 远程命令执行漏洞