AI一键免杀WebShell，包含金刚狼、哥斯拉、冰蝎、菜刀等
☆29Jun 7, 2026Updated 4 months ago
Alternatives and similar repositories for webshell
Users that are interested in webshell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 幽狼AI Shell：首款支持AI渗透的高级WebShell & C2管理工具，内置WebShell MCP服务器，支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，Shell…☆280Aug 16, 2026Updated 2 months ago
- 一款红队打点助力DDDD神器(POC|workflow|finger|dir管理、自动生成workflow)☆38Apr 27, 2026Updated 6 months ago
- Fastjson 1.2.68 ~ 1.2.83 RCE，jdk8、17、21和25全版本，支持批量urls进行poc验证。☆37Jul 21, 2026Updated 3 months ago
- 读过的安全文章离线归档 | begin in 2023.11.23☆18Jun 4, 2024Updated 2 years ago
- IIS 模块后门☆12Feb 23, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 漏洞文库 wiki.wy876.cn☆108Feb 26, 2025Updated last year
- 一个简单的代理浏览器插件☆34Feb 9, 2026Updated 8 months ago
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆18Aug 25, 2025Updated last year
- GYscan是一款基于Go语言开发的现代化综 合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆84Oct 22, 2026Updated last week
- Shiro反序列化漏洞一站式综合利用工具☆175Jan 22, 2026Updated 9 months ago
- A powerful Chrome extension to bypass common anti-debugging scripts and DevTools traps.☆15Sep 13, 2026Updated last month
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆19Sep 15, 2026Updated last month
- Taiji-Golang高并发红队打点横向移动内网渗透扫描器（主机存活探测、端口扫描、Web指纹识别、弱口令爆破）☆13Apr 25, 2023Updated 3 years ago
- SecretGuard 是一个专业的 GitHub 密钥泄露监控系统，帮助您发现和防止敏感信息泄露到 GitHub 公开仓库。☆14Nov 5, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间☆24Mar 27, 2026Updated 7 months ago
- ARL 资产侦察灯塔系统二开 提高性能，升级到 python3.12 增强稳定性。MongoDB 升级到 6x。解决扫描停止问题。☆22Jan 13, 2026Updated 9 months ago
- CVE-2026-24061 GNU Inetutils telnetd 身份验证绕过漏洞检测与利用 GUI 工具☆17Jan 28, 2026Updated 9 months ago
- ShadowScan 是一款面向安全从业人员的自动化信息泄露扫描与资产测绘工具。深度整合多平台搜索引擎，通过自动化 Dork 语法扫描发现暴露在公网的敏感文件，并自动提取身份证号、手机号、学号、邮箱、银行卡号等个人敏感信息（PII）。 支持 **Bing / FoFa /…☆50Jun 10, 2026Updated 4 months ago
- ☆27Sep 1, 2025Updated last year
- 后渗透信息/密码/凭证收集工具☆314May 7, 2025Updated last year
- cve系列更新☆33Aug 28, 2026Updated 2 months ago
- 清羽(ClearFeather)是一款专为网络安 全攻防演练设计的资产智能清洗与分类工具。它能够自动化处理攻防演练中的各类资产数据，包括IP、域名、URL等，通过结合DeepSeek API的大语言模型能力和精准的正则表达式处理，实现资产的高效识别、分类与整理。☆25May 29, 2025Updated last year
- A cross-platform, multi-protocol C2 framework in Go (TCP/WebSocket/KCP/HTTP/OSS) for authorized pentesting & red teaming☆551Sep 11, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 对JNDIbypass工具进行二次开发☆19Dec 25, 2024Updated last year
- su18 ysoserial☆18May 4, 2023Updated 3 years ago
- 一个功能完整的网络安全攻防演练平台，采用红黑色调主题设计，支持实时态势感知、队伍管理、靶标部署、成绩统计等完整功能。"蓝的 世界于凌晨两点沉入梦境，红的天地在此刻悄然迎来黎明。"☆17Sep 14, 2026Updated last month
- fscan 的魔改版☆13Jul 8, 2024Updated 2 years ago
- Go 调用DLL添加计划任务维持权限☆16Nov 13, 2022Updated 3 years ago
- CVE-2021-34371.jar☆32Sep 6, 2021Updated 5 years ago
- Out-of-the-box CobaltStrike Beacon source code use C++☆36Aug 3, 2025Updated last year
- 一款用于红队攻防演练协作、渗透测试漏洞生命周期管理平台☆37Nov 24, 2025Updated 11 months ago
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆185May 10, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Dockerized template to build CS BOFs using clang-cl☆26Jan 29, 2026Updated 9 months ago
- AsyncRAT的汉化版☆11Dec 11, 2025Updated 10 months ago
- GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具☆123Jan 17, 2025Updated last year
- jProxy 是一个 JAVA 编写的 HTTP 代理服务器类库，支持 HTTP、HTTPS、Websocket 协议，并且支持 MITM(中间人攻击)，可以对 HTTP、HTTPS 协议的报文进行捕获和篡改。☆11Aug 9, 2024Updated 2 years ago
- 若依框架综合利用工具☆36Dec 16, 2025Updated 10 months ago
- Hephaestus 是集资产收集、攻击面评估、漏洞验证与 AI 渗透对话于一体的安全测试平台。提供 Web 服务、桌面客户端及独立扫描 Agent，支持本机扫描、组合任务和分布式节点执行。☆41Updated this week
- PHP Bypass Shell Archive (2025 PHP Web Shells) 40+ For Bypass servers, disable functions, auto rooting linux, create administrator window…☆33Jul 12, 2025Updated last year