Discover @Al1ex Open Source projects

@Al1ex

Al1ex

Stars
4,814
Global Rank 5,673 (Top 0.2 %)
Followers 1,202
Following 69
Registered over 6 years ago
Most used languages

Python
33.8 %

Java
27.9 %

PowerShell
10.3 %

C
10.3 %

PHP
2.9 %

Solidity
2.9 %

C++
2.9 %

Perl
1.5 %

ASP.NET 1.5 %

Ruby
1.5 %

Go
1.5 %

Shell
1.5 %

HTML
1.5 %
Location 🇨🇳 China
Country Total Rank 1,165
Country Ranking

PowerShell
3

ASP.NET 14

Solidity
17

C
153

Perl
246

Ruby
494

Python
1,430

PHP
1,536

C++
2,400

HTML
3,079

Java
3,166

Shell
7,665

Go
8,881

Pentest-tools

Intranet penetration tools

WindowsElevation

Windows Elevation(持续更新)

CSPlugins

Cobaltstrike Plugins

LinuxEelvation

Linux Eelvation(持续更新)

CVE-2021-22205

CVE-2021-22205& GitLab CE/EE RCE

Red-Team

Red-Team Attack Guid

Information-Security

Information security

CVE-2021-22986

CVE-2021-22986 & F5 BIG-IP RCE

Awesome-Pentest

Collection of penetration testing tools

CVE-2020-36179

CVE-2020-36179~82 Jackson-databind SSRF&RCE

Heptagram

This project is used to collect the EXP/POC disclosed on the Internet and provide project support for Heptagram security team.

CVE-2022-0847

CVE-2021-27928

CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞

Monitor

A old way to Persistence

CVE-2020-35728

CVE-2020-35728 & Jackson-databind RCE

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST RCE

Hadoop-Yarn-ResourceManager-RCE

Hadoop Yan ResourceManager unauthorized RCE

CVE-2021-2109

CVE-2021-2109 && Weblogic Server RCE via JNDI

CVE-2020-17530

S2-061 CVE-2020-17530

Map-of-IT-Architects-Technical-Knowledge

IT架构师技术知识图谱

APT-GUID

MysqlHoneypot

BlockChainSec

BlockChain Security

HW-2023

Pentest-Command

Pentest-Command

CVE-2020-36184

CVE-2020-36184 && Jackson-databind RCE

0DayList

FastJsonAutoTypeBypass

FastJsonAutoTypeBypass

CVE-2021-21975

CVE-2021-21975 vRealize Operations Manager SSRF

WebShells

WebShell studying

CVE-2021-30461

Alibab-Nacos-Unauthorized-Login

Alibab Nacos Unauthorized Login

SelectMyParent

CVE-2020-36188

CVE-2020-36188 &&Jackson-databind RCE

CVE-2020-5902

CVE-2017-16995

CVE-2017-16995（Ubuntu本地提权漏洞）

CheckPWD

Check the default pwd of product via checklist.

CVE-2017-7269

SonicWall

SonicWall SSL-VPN RCE

CVE-2019-0230

S2-059(CVE-2019-0230)

TongDa-RCE

通达文件包含+文件上传导致RCE

RemoteDLLInjector

RemoteDLLInjector

php_mt_seed

php_mt_seed is a PHP mt_rand() seed cracker

CVE-2020-10673

CVE-2020-10673:jackson-databind RCE

RDPLinkEnum

CVE-2020-13937

Apache Kylin API Unauthorized Access

CVE-2020-2883

CVE-2020-35729

EmergencyTools

CVE-2020-11652

CVE-2020-11652 & CVE-2020-11651

SoliditySecurity

Solidity Security

CVE-2017-3506

JEP290_RMI_Bypass

JEP290_RMI_Bypass

Rogue-MySql-Server

Rogue-MySql-Server

CVE-2020-11113

CVE-2020-11113:Jackson-databind RCE

BlockChainConstruction

BlockChain Security Construction

LM-HASH

CVE-2020-17456

CVE-2020-17456 & Seowon SLC 130 Router RCE

CVE-2019-12814

CVE-2019-12814:Jackson JDOM XSLTransformer Gadget

Alibab-Nacos-Unauthorized-Reset-PWD

Alibab-Nacos-Unauthorized-Reset PWD

CVE-2021-34045

Novel-plus-install-v3.5.3-Druid Unauthorized access

PSTools

reDuh

WCE

Window Hash&Password dump

CVE-2020-26217

CVE-2020-26217 && XStream RCE

ExtensionHijack

ExtensionHijack

CVE-2021-3317

CVE-2017-17485

CVE-2017-17485:Jackson-databind RCE

GPOCrack

Active Directory Group Policy Preferences cpassword cracker/decrypter.

MakeMeEnterpriseAdmin

MakeMeEnterpriseAdmin

CVE-2021-4034

Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

AdFind

Hook-PasswordChangeNotify

Hook PasswordChangeNotify

CVE-2020-14195

This is a simple test for FasterXML jackson-databind

EvilReflex

CVE-2019-12086

jackson unserialize

CVE-2020-8635

Wing FTP Server 6.2.3 - Privilege Escalation

ICMPTunnel

JavaDeRe

Class to base64 String，base64 String to class

Powershell-C2

CVE-2020-24750

Invoke-DCSync

CVE-2020-26259

CVE-2020-26259 &&XStream Arbitrary File Delete

Al1ex

CVE-2017-10271

CVE-2019-17571

Environment for CVE_2019_17571

CVE-2020-35713

CVE-2020-9470

Wing FTP Server 6.2.5 - Privilege Escalation

Asmtools

Redis-RCE

Redis 4.x/5.x RCE

SSHServer

Mysql-Readfile

CVE-2018-1297

EXP for CVE-2018-1297

PowerShellProfiler

PowerShellProfiler

JEP290Test

Bypass JEP290 Test

DoubanMovieTop

Use the scrapy framework to climb the top 250 movies of Douban

Shiro-basic

This is a simple Shiro-basic project .Just for pentest env

CVE-2020-26258

CVE-2020-26258 && XStream SSRF

JMXAttacking