1120362990/vulnerability-list external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

1120362990/vulnerability-list

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/1120362990/vulnerability-list)

Close

1120362990 / vulnerability-listView on GitHubMore

• External links
• Readme badge

在渗透测试中快速检测常见中间件、组件的高危漏洞。

☆725Mar 21, 2022Updated 4 years ago

Alternatives and similar repositories for vulnerability-list

Users that are interested in vulnerability-list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• opensec-cn / vtest

  View on GitHub
  用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
  ☆867Jul 21, 2019Updated 7 years ago
• dr0op / WeblogicScan

  View on GitHub
  增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持
  ☆964Jun 16, 2024Updated 2 years ago
• r35tart / Penetration_Testing_Case

  View on GitHub
  用于记录分享一些有趣的案例
  ☆867Jan 10, 2022Updated 4 years ago
• boy-hack / wooyun-payload

  View on GitHub
  从wooyun中提取的payload，以及burp插件
  ☆839Jun 17, 2022Updated 4 years ago
• 7dog7 / bottleneckOsmosis

  View on GitHub
  瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
  ☆718Jul 20, 2022Updated 4 years ago
• Open source password manager - Proton Pass • Ad
  Securely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
• aleenzz / MYSQL_SQL_BYPASS_WIKI

  View on GitHub
  mysql注入,bypass的一些心得
  ☆1,327Jun 25, 2024Updated 2 years ago
• l3m0n / Bypass_Disable_functions_Shell

  View on GitHub
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,190Oct 17, 2023Updated 3 years ago
• Mel0day / RedTeam-BCS

  View on GitHub
  BCS（北京网络安全大会）2019 红队行动会议重点内容
  ☆819Sep 4, 2019Updated 7 years ago
• theLSA / CS-checklist

  View on GitHub
  PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist
  ☆667Feb 24, 2021Updated 5 years ago
• LandGrey / webshell-detect-bypass

  View on GitHub
  绕过专业工具检测的Webshell研究文章和免杀的Webshell
  ☆1,735Nov 15, 2020Updated 5 years ago
• uknowsec / Active-Directory-Pentest-Notes

  View on GitHub
  个人域渗透学习笔记
  ☆1,807Feb 7, 2020Updated 6 years ago
• biggerwing / nsfocus-rsas-knowledge-base

  View on GitHub
  绿盟科技漏洞扫描器(RSAS)漏洞库
  ☆362May 30, 2019Updated 7 years ago
• LangziFun / LangSrcCurise

  View on GitHub
  SRC子域名资产监控
  ☆1,290Jan 14, 2021Updated 5 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,014May 21, 2024Updated 2 years ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• uknowsec / SharpToolsAggressor

  View on GitHub
  内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~
  ☆499Feb 13, 2020Updated 6 years ago
• QAX-A-Team / LuWu

  View on GitHub
  红队基础设施自动化部署工具
  ☆846Jan 4, 2023Updated 3 years ago
• CTF-MissFeng / bayonet

  View on GitHub
  bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统
  ☆1,524Nov 22, 2022Updated 3 years ago
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,023Feb 23, 2022Updated 4 years ago
• c0ny1 / FastjsonExploit

  View on GitHub
  Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
  ☆1,407Dec 16, 2022Updated 3 years ago
• rabbitmask / WeblogicScan

  View on GitHub
  Weblogic一键漏洞检测工具，V1.5，更新时间：20200730
  ☆2,260May 22, 2023Updated 3 years ago
• Echocipher / AUTO-EARN

  View on GitHub
  一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具
  ☆743Dec 8, 2022Updated 3 years ago
• timwhitez / crawlergo_x_XRAY

  View on GitHub
  360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能
  ☆1,181Nov 10, 2021Updated 4 years ago
• yzddmr6 / webshell-venom

  View on GitHub
  免杀webshell无限生成工具
  ☆1,277Apr 3, 2020Updated 6 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• r0eXpeR / redteam_vul

  View on GitHub
  红队作战中比较常遇到的一些重点系统漏洞整理。
  ☆2,528Jul 17, 2021Updated 5 years ago
• heroanswer / XSS_Cheat_Sheet_2020_Edition

  View on GitHub
  xss漏洞模糊测试payload的最佳集合 2020版
  ☆511May 25, 2020Updated 6 years ago
• r35tart / RW_Password

  View on GitHub
  此项目用来提取收集以往泄露的密码中符合条件的强弱密码
  ☆1,130Apr 1, 2019Updated 7 years ago
• se55i0n / DBScanner

  View on GitHub
  自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测
  ☆563Dec 1, 2017Updated 8 years ago
• aleenzz / Cobalt_Strike_wiki

  View on GitHub
  Cobalt Strike系列
  ☆2,432Dec 3, 2023Updated 2 years ago
• daybreak-kits / weblogicScanner

  View on GitHub
  weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…
  ☆2,080Nov 24, 2023Updated 2 years ago
• JE2Se / AssetScan

  View on GitHub
  资产探测工具，检测存活，检测风险端口，常规端口，全端口探测等等，对探测的端口的脆弱面进行安全分析进行
  ☆436May 22, 2023Updated 3 years ago
• WyAtu / Perun

  View on GitHub
  Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架
  ☆1,052Apr 25, 2019Updated 7 years ago
• zhzyker / exphub

  View on GitHub
  Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…
  ☆4,293Apr 4, 2021Updated 5 years ago
• Proton VPN Special Offer - Get 70% off • Ad
  Special partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
• c0ny1 / passive-scan-client

  View on GitHub
  Burp被动扫描流量转发插件
  ☆1,459Jun 17, 2024Updated 2 years ago
• Lucifer1993 / struts-scan

  View on GitHub
  Python2编写的struts2漏洞全版本检测和利用工具
  ☆1,409May 7, 2019Updated 7 years ago
• jiangsir404 / POC-S

  View on GitHub
  POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC
  ☆355Mar 12, 2020Updated 6 years ago
• Lucifer1993 / AngelSword

  View on GitHub
  Python3编写的CMS漏洞检测框架
  ☆1,440May 22, 2023Updated 3 years ago
• aleenzz / MSSQL_SQL_BYPASS_WIKI

  View on GitHub
  MSSQL注入提权,bypass的一些总结
  ☆738Jun 25, 2024Updated 2 years ago
• grayddq / PublicMonitors

  View on GitHub
  对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险
  ☆608Apr 12, 2021Updated 5 years ago
• Lucifer1993 / TPscan

  View on GitHub
  一键ThinkPHP漏洞检测
  ☆1,157Nov 1, 2023Updated 3 years ago