l3m0n

🍋

I may be slow to respond.

招红队，实习正式都可以，简历请发hr#lichoin[dot]com

adamyordan / CVE-2019-1003000-Jenkins-RCE-POC.py

Last active July 29, 2019 09:29

CVE-2019-1003000-Jenkins-RCE-POC

	#!/usr/bin/python

	# Author: Adam Jordan
	# Date: 2019-02-15
	# Repository: https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc
	# PoC for: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)


	import argparse
	import jenkins

phith0n / fpm.py

Last active August 18, 2025 08:04

Fastcgi PHP-FPM Client && Code Execution

	import socket
	import random
	import argparse
	import sys
	from io import BytesIO

	# Referrer: https://github.com/wuyunfeng/Python-FastCGI-Client

	PY2 = True if sys.version_info.major == 2 else False

Ridter / MS16_032.cs

Last active September 21, 2017 04:06

MS16_032 powershell to exe

	/*
	Author: Evilcg, Twitter: @Evilcg
	Step One:
	PS C:\> [psobject].Assembly.Location
	C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
	Step Two:
	C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /reference:"C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll" /out:MS16_032.exe MS16_032.cs

	Windows 10 reference may be Here: C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35

RickGray / phpwind_hash_length_extension_attack.py

Created May 26, 2016 07:13

PHPWind Hash-Length-Extension-Attack

	#!/usr/bin/env python
	# author: RickGray
	# update: 2016-05-25
	# >>>>>>>>>>>
	# requests, hashpumpy modules required
	# : pip install requests hashpumpy

	import re
	import json
	import time

craigbeck / introspection-query.graphql

Created April 6, 2016 20:20

Introspection query for GraphQL