A comprehensive documentation repository compiling key system vulnerabilities frequently encountered in red team operations.
红队作战中比较常遇到的一些重点系统漏洞整理。
This repository serves as a curated knowledge base for red teamers and security professionals to identify, understand, and exploit critical vulnerabilities in common enterprise systems such as OA platforms, email servers, and web middleware. It is primarily used for vulnerability management, risk assessment, and exploitation during penetration testing and red team engagements.
This repository is a curated collection of vulnerability disclosures and exploitation references rather than an executable tool; users should verify the applicability of vulnerabilities to their target environments and use the linked exploitation tools responsibly within legal boundaries.
Use in conjunction with EHole (https://github.com/EdgeSecurityTeam/EHole)
Enhances effectiveness by fingerprinting key attack systems before leveraging the documented vulnerabilities.
⚒️ TDOA_RCE tool (https://github.com/xinyu2428/TDOA_RCE)
A comprehensive exploitation tool for TongDa OA remote code execution vulnerabilities.
⚒️ Microsoft Exchange SSRF exploit (https://github.com/GreyOrder/CVE-2021-26855)
An exploitation script for the Exchange SSRF vulnerability CVE-2021-26855.