Pocsploit is a lightweight, flexible and novel open source poc verification framework

cckuailong

Last update: Dec 24, 2022

Related tags

Deep Learning pocsploit

Overview

pocsploit

中文 README

pocsploit is a lightweight, flexible and novel open source poc verification framework

Pain points of the POC framework in the market

There are too many params, I don't know how to get started, but only some of them are commonly used.
YAML poc framework(like nuclei & xray) is not flexible enough. the conversion cost is very high when writing poc. Sometimes it's hard when encountering non-http protocols. (only hex can be used)
Sometimes POC has false positives, which can be avoided by accurate fingerprint matching.
It is heavily dependent on the framework. Poc in pocsploit can be used in the framework and can also be used alone.

Advantages of pocsploit

Lighter, does not depend on the framework, a single poc can run
Easier to rewrite Poc
More flexible (compared to nuclei, xray, goby, etc.)
Fewer false positives, providing fingerprint prerequisite judgment, you can first judge whether the site has the fingerprint of a certain component, and then perform POC verification, which is more accurate
There are many ways to use, providing poc / exp
Detailed vulnerability information display
Poc ecological sustainability: I will continue to update the Poc to modules/, and welcome everyone to join us Contribute Poc

Encountered code/poc issues, please Submit issue

Poc Statistics

cve	cnnvd	others
345	7	102

Usage

Install requirements

pip3 install -r requirements.txt

poc to verify single website

python3 pocsploit.py -iS "http://xxxx/" -r "modules/" -t 100 --poc

specific poc

python3 pocslpoit.py -iS "http://xxxxx" -r "modules/vulnerabilities/thinkphp/thinkphp-5022-rce.py" --poc

exp to exploit many websites (with urls in a file)

python3 pocslpoit.py -iF "urls.txt" -r "modules/vulnerabilities/" --exp

Turn on fingerprint pre-verification, verify the fingerprint first, and then enter the poc verification after matching

python3 pocslpoit.py -iS "http://xxxxx" -r "modules/vulnerabilities/thinkphp/thinkphp-5022-rce.py" --poc --fp

Output to file & console quiet mode

python3 pocslpoit.py -iS "http://xxxx" -r "modules/vulnerabilities/" --poc -o result/result.log -q

Other Usage

python3 pocsploit.py --help

others

OOB

Please config conf/config.py

P.S. How to build your own DNSLog，please visit Hyuga-DNSLog

DNSLOG_URI: DNSLog Address
DNSLOG_TOKEN: Token
DNSLOG_IDENTIFY: your identity

License

pocsploit is distributed under MIT License

Repobeats

MVGCN: a novel multi-view graph convolutional network (MVGCN) framework for link prediction in biomedical bipartite networks.

MVGCN MVGCN: a novel multi-view graph convolutional network (MVGCN) framework for link prediction in biomedical bipartite networks. Developer: Fu Hait

13 Dec 1, 2022

LightLog is an open source deep learning based lightweight log analysis tool for log anomaly detection.

LightLog Introduction LightLog is an open source deep learning based lightweight log analysis tool for log anomaly detection. Function description [BG

25 Dec 17, 2022

FEDn is an open-source, modular and ML-framework agnostic framework for Federated Machine Learning

FEDn is an open-source, modular and ML-framework agnostic framework for Federated Machine Learning (FedML) developed and maintained by Scaleout Systems. FEDn enables highly scalable cross-silo and cross-device use-cases over FEDn networks.

75 Nov 9, 2022

Lightweight mmm - Lightweight (Bayesian) Media Mix Model

Lightweight (Bayesian) Media Mix Model This is not an official Google product. L

342 Jan 3, 2023

SpeechNAS Better Trade off between Latency and Accuracy for Large Scale Speaker Verification

24 May 20, 2022

VGGVox models for Speaker Identification and Verification trained on the VoxCeleb (1 & 2) datasets

VGGVox models for speaker identification and verification This directory contains code to import and evaluate the speaker identification and verificat

338 Dec 27, 2022

Temporal Dynamic Convolutional Neural Network for Text-Independent Speaker Verification and Phonemetic Analysis

TDY-CNN for Text-Independent Speaker Verification Official implementation of Temporal Dynamic Convolutional Neural Network for Text-Independent Speake

16 Oct 17, 2022

The deployment framework aims to provide a simple, lightweight, fast integrated, pipelined deployment framework that ensures reliability, high concurrency and scalability of services.

savior是一个能够进行快速集成算法模块并支持高性能部署的轻量开发框架。能够帮助将团队进行快速想法验证（PoC），避免重复的去github上找模型然后复现模型；能够帮助团队将功能进行流程拆解，很方便的提高分布式执行效率；能够有效减少代码冗余，减少不必要负担。

125 Dec 22, 2022

Contrastive Fact Verification

VitaminC This repository contains the dataset and models for the NAACL 2021 paper: Get Your Vitamin C! Robust Fact Verification with Contrastive Evide

47 Dec 19, 2022

Comments

Most of the time it throws an error

Which is

/usr/local/lib/python3.8/dist-packages/urllib3/connectionpool.py:842: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html

Screenshot_43

Please fix it!

It generates lot of unwanted logs.

opened by Sachinart 3

ModuleNotFoundError

┌──(root💀kali)-[~/pocsploit] └─# python3 pocsploit.py -iS "https://testphp.vulnweb.com/" -r "modules/" -t 100 --poc Traceback (most recent call last): File "/root/pocsploit/pocsploit.py", line 3, in from lib.cli import main ModuleNotFoundError: No module named 'lib.cli'

How to fix it

opened by TheLittleH4ck3r 8
face probelm
module = _load(spec)

File "", line 711, in _load
File "", line 680, in _load_unlocked
File "", line 850, in exec_module
File "", line 228, in _call_with_frames_removed
File "/root/Desktop/pocsploit/modules/vulnerabilities/wordpress/wp-xmlrpc-pingback-detection.py", line 2, in
from plugins.oob import verify_request, gen_oob_domain
ModuleNotFoundError: No module named 'plugins.oob'
opened by Shamim8787 0

Issue on install

python3 pocsploit.py -iF example.txt -r modules/ --poc

  if len(self.targets) is 0:

                                 __      _ __ 
    ____  ____  ______________  / /___  (_) /_
   / __ \/ __ \/ ___/ ___/ __ \/ / __ \/ / __/
  / /_/ / /_/ / /__(__  ) /_/ / / /_/ / / /_  
 / .___/\____/\___/____/ .___/_/\____/_/\__/  
/_/                   /_/                     
    { Version 0.0.1 by cckuailong }


2022-03-30 15:49:09.054 | INFO     | lib.core.option:EngineRegister:33 - Threads Num: 10
2022-03-30 15:49:09.054 | INFO     | lib.controller.loader:loadModule:16 - Initialize modules...
2022-03-30 15:49:09.346 | WARNING  | lib.cli:main:44 - Traceback (most recent call last):
  File "/opt/pocsploit/lib/cli.py", line 23, in main
    loadModule()
  File "/opt/pocsploit/lib/controller/loader.py", line 28, in loadModule
    tmp_module_objs.add(imp.load_module(module_name, fp, pathname, description))
  File "/usr/lib/python3.9/imp.py", line 234, in load_module
    return load_source(name, filename, file)
  File "/usr/lib/python3.9/imp.py", line 171, in load_source
    module = _load(spec)
  File "<frozen importlib._bootstrap>", line 711, in _load
  File "<frozen importlib._bootstrap>", line 680, in _load_unlocked
  File "<frozen importlib._bootstrap_external>", line 790, in exec_module
  File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed
  File "/opt/pocsploit/modules/vulnerabilities/wordpress/wp-xmlrpc-pingback-detection.py", line 2, in <module>
    from plugins.oob import verify_request, gen_oob_domain
ModuleNotFoundError: No module named 'plugins.oob'

2022-03-30 15:49:09.346 | WARNING  | lib.cli:main:45 - It seems like you reached a unhandled exception, please raise a issue via:<https://github.com/cckuailong/pocsploit/issues/new>. ```

I literally just installed (Yes, I installed requirements.txt) mind having a look?

Thanks

opened by Jopa0226 5

Pocsploit is a lightweight, flexible and novel open source poc verification framework

Related tags

Overview

pocsploit

pocsploit is a lightweight, flexible and novel open source poc verification framework

Pain points of the POC framework in the market

Advantages of pocsploit

Poc Statistics

Usage

Install requirements

others

OOB

License

Repobeats

You might also like...

MVGCN: a novel multi-view graph convolutional network (MVGCN) framework for link prediction in biomedical bipartite networks.

LightLog is an open source deep learning based lightweight log analysis tool for log anomaly detection.

FEDn is an open-source, modular and ML-framework agnostic framework for Federated Machine Learning

Lightweight mmm - Lightweight (Bayesian) Media Mix Model

SpeechNAS Better Trade off between Latency and Accuracy for Large Scale Speaker Verification

VGGVox models for Speaker Identification and Verification trained on the VoxCeleb (1 & 2) datasets

Temporal Dynamic Convolutional Neural Network for Text-Independent Speaker Verification and Phonemetic Analysis

The deployment framework aims to provide a simple, lightweight, fast integrated, pipelined deployment framework that ensures reliability, high concurrency and scalability of services.

Contrastive Fact Verification

Comments

Most of the time it throws an error

ModuleNotFoundError

face probelm

Issue on install

Owner

cckuailong

ObjectDetNet is an easy, flexible, open-source object detection framework

Open source repository for the code accompanying the paper 'Non-Rigid Neural Radiance Fields Reconstruction and Novel View Synthesis of a Deforming Scene from Monocular Video'.

TACTO: A Fast, Flexible and Open-source Simulator for High-Resolution Vision-based Tactile Sensors

Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more

Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more

Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more

Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more

PaddleRobotics is an open-source algorithm library for robots based on Paddle, including open-source parts such as human-robot interaction, complex motion control, environment perception, SLAM positioning, and navigation.

Pytorch reimplement of the paper "A Novel Cascade Binary Tagging Framework for Relational Triple Extraction" ACL2020. The original code is written in keras.

ZSL-KG is a general-purpose zero-shot learning framework with a novel transformer graph convolutional network (TrGCN) to learn class representation from common sense knowledge graphs.