security-labs-pocs

Datadog Security Labs 研究与概念验证代码 === 本仓库包含来自 Datadog Security Labs 的信息、漏洞利用、恶意软件样本和脚本。 目标 本仓库旨在提供概念验证漏洞利用、恶意软件样本和技术演示，以帮助社区应对威胁。本仓库中的代码可能用于： 改进检测 继续对战术、技术和程序 TTP 进行额外研究 发现更多漏洞利用 概念验证 Dirty Pipe 容器逃逸 JWT 空签名漏洞的利用与示例易受攻击应用 CVE-2022-21449 Spring Core RCE 又名 Spring4shell CVE-2022-22965 Confluence...

dirtypipe-container-breakout-poc

Dirty Pipe 容器逃逸 已移至 https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This repository is a collection of proof-of-concept PoC exploits from Datadog Security Labs. The exploits are designed to demonstrate vulnerabilities in various software products, including Confluence, OpenSSL, and Spring. The repository contains code and instructions for running the exploits, as...