禅道研发项目管理系统`misc-captcha-user`认证绕过后台命令注入漏洞
☆108Apr 24, 2023Updated 2 years ago
Alternatives and similar repositories for Zentao-Captcha-RCE
Users that are interested in Zentao-Captcha-RCE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 组合利用泛微信息泄漏漏洞和任意用户登录漏洞，可获取全部loginId并测试登录☆59Aug 3, 2023Updated 2 years ago
- 哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。☆170Oct 8, 2024Updated last year
- 一款针对用友NC综合漏洞利用工具☆240Nov 27, 2023Updated 2 years ago
- 禅道相关poc☆172Jun 20, 2024Updated last year
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆120Aug 9, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Godzilla插件|内存马|Suo5内存代理｜jmg for Godzilla☆243Jun 6, 2024Updated last year
- 通过Dump内存读取ToDesk设备代码、连接密码☆243Sep 9, 2024Updated last year
- 【两万字原创】零基础学fastjson漏洞（提高篇），公众号：追梦信安☆211Dec 7, 2023Updated 2 years ago
- 获取服务器或域控登录日志☆276Sep 8, 2023Updated 2 years ago
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆555Feb 1, 2024Updated 2 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 2 years ago
- 帆软/致远密码解密工具☆359Jul 29, 2021Updated 4 years ago
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆245Apr 29, 2025Updated 10 months ago
- EXP for CVE-2023-28434 MinIO unauthorized to RCE☆319Apr 4, 2023Updated 2 years ago
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆176Apr 17, 2024Updated last year
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 2 years ago
- Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具☆111Oct 16, 2023Updated 2 years ago
- Nacos JRaft Hessian 反序列化 RCE EXP☆65Jun 13, 2023Updated 2 years ago
- DBeaver数据库密码解密工具☆199Nov 29, 2023Updated 2 years ago
- frp修改版，增加socks、pf命令，便捷启用socks5代理、端口转发，且去除流量特征，增加loadini命令，支持命令行参数导入base64编码的配置文件☆103Dec 5, 2021Updated 4 years ago
- ☆19Jan 25, 2024Updated 2 years ago
- 本工具为jeecg框架漏洞利用工具非jeecg-boot！☆183Aug 13, 2024Updated last year
- 钓鱼上线后渗透工具☆131Feb 19, 2023Updated 3 years ago
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CVE-2022-22947 注入Godzilla内存马☆210Apr 26, 2022Updated 3 years ago
- Nacos Derby命令执行漏洞利用脚 本☆150Apr 7, 2025Updated 11 months ago
- Spring Actuator端点的BurpSuite被动扫描插件。☆202Nov 2, 2022Updated 3 years ago
- 宏景ehr sql注入的tamper脚本（sqlmap使用）☆36Jun 14, 2023Updated 2 years ago
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- 域信息收集工具☆11Jun 5, 2023Updated 2 years ago
- ☆342Jun 7, 2022Updated 3 years ago
- 一键获取nacos中的配置文件信息和绘制密码本☆121Jun 28, 2024Updated last year
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 亿赛通电子文档安全管理系统-/UploadFileFromClientServiceForClient 任意文件上传漏洞☆13Aug 15, 2023Updated 2 years ago
- 泛微最近的漏洞利用工具（PS：2023）☆481Dec 14, 2023Updated 2 years ago
- 金蝶星空云反序列化漏洞内存马☆52Mar 27, 2024Updated 2 years ago
- RPC远程主机信息匿名扫描工具☆319Sep 30, 2022Updated 3 years ago
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆242Nov 25, 2022Updated 3 years ago
- Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小☆66Jul 4, 2024Updated last year
- 懒鬼插件/审计过的后的渗透插件/我凭本事打的SESSION凭什么还要我自己动手后渗透？☆245Feb 28, 2026Updated 3 weeks ago