flash 劫持轮子,CSRF,劫持,跳转,swf 有需求可以提issues ,src挖掘,劫持response
☆86Nov 9, 2019Updated 6 years ago
Alternatives and similar repositories for flash-hijack
Users that are interested in flash-hijack are comparing it to the libraries listed below
Sorting:
- Zimbra XXE+SSRF+UPLOAD Poc☆59Jun 25, 2019Updated 6 years ago
- 基于burpsuite headless 的代理式被动扫描系统☆95Feb 10, 2020Updated 6 years ago
- 从shodan获取使用了相同favicon.ico的网站☆189Feb 16, 2019Updated 7 years ago
- 更快速的进行Web应用指纹识别☆170May 9, 2019Updated 6 years ago
- ☆404Feb 28, 2020Updated 6 years ago
- CVE-2018-8021 Proof-Of-Concept and Exploit☆106Dec 3, 2018Updated 7 years ago
- ☆10May 23, 2019Updated 6 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆728Mar 21, 2022Updated 3 years ago
- mstsc.exe Path Traversal to RCE POC☆91May 23, 2019Updated 6 years ago
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆217Aug 17, 2017Updated 8 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- ☆131Jun 17, 2022Updated 3 years ago
- A fake JDBC driver that allows OS command execution.☆125Oct 2, 2022Updated 3 years ago
- 一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项☆78Jul 21, 2020Updated 5 years ago
- CMS和中间件指纹库☆399Apr 30, 2019Updated 6 years ago
- 基于poc-t 并在此基础上增加批量功能!☆196Apr 26, 2020Updated 5 years ago
- OpenVPN Connect for Windows (MSI) - 3.1.0.361 - Privilege Escalation☆26Feb 28, 2020Updated 6 years ago
- web模糊测试 - 将漏洞可能性放大☆145Apr 23, 2019Updated 6 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆167Apr 5, 2019Updated 6 years ago
- python3 写的一些权限维持脚本☆38Feb 10, 2020Updated 6 years ago
- 绿盟科技漏洞扫描器(RSAS)漏洞库☆366May 30, 2019Updated 6 years ago
- JRE8u20_RCE_Gadget☆255Jul 1, 2016Updated 9 years ago
- Airbug(空气洞),收集漏洞poc用于安全产品☆355Sep 26, 2019Updated 6 years ago
- 通用的指纹识别规则☆371Dec 2, 2022Updated 3 years ago
- cve-2020-0688☆166Feb 26, 2020Updated 6 years ago
- 漏洞利用框架模块分享仓库☆348Oct 8, 2019Updated 6 years ago
- Simple Android/iOS protocol analysis and utilization tool☆953Jul 12, 2025Updated 7 months ago
- 基于 puppeteer-core + chromium 的 XSS 机器人☆26Jun 27, 2019Updated 6 years ago
- Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)☆1,389Dec 16, 2022Updated 3 years ago
- A Java runtime information-gathering tool which uses the Java Attach API for information acquisition☆204Apr 26, 2021Updated 4 years ago
- dynamic crawler for web vulnerability scanner☆252Mar 4, 2020Updated 6 years ago
- 总结了20+.Net反序列化文章,持续更新☆748Apr 3, 2024Updated last year
- 用于辅助安全工程师漏洞挖掘、测试、复现,集合了mock、httplog、dns tools、xss,可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- PHP 扩展, 用于 PHP-FPM、FastCGI、LD_PRELOAD等模式下突破 disabled_functions☆107Sep 8, 2021Updated 4 years ago
- django 漏洞:CVE-2020-7471 Potential SQL injection via StringAgg(delimiter) 的漏洞环境和 POC☆103Feb 13, 2020Updated 6 years ago
- Reference:https://www.w2n1ck.com/article/44/☆155Mar 7, 2020Updated 5 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- ATT&CK实操☆373Sep 7, 2019Updated 6 years ago
- 内网渗透中常用的c#程序整合成cs脚本,直接内存加载。持续更新~☆498Feb 13, 2020Updated 6 years ago