一个各类漏洞POC知识库
☆11Jul 18, 2022Updated 4 years ago
Alternatives and similar repositories for Awesome-POC
Users that are interested in Awesome-POC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 白盒审计工具&渗透测试工具：1.输入源码文件物理路径2.输入测试网站地址3.自动爬取源码中的所有文件名以及相对路径4.保存相对路径，制作URL字典5.使用制作的字典，逐一访问测试网站6.得到不要验证cookie的页面，进行进一步审计或测试☆11Oct 31, 2021Updated 5 years ago
- 一款用于渗透测试的工具集☆15Oct 14, 2020Updated 6 years ago
- 一款适合在渗透测试中随时记录和保存的漏洞检测工具☆20Jul 20, 2021Updated 5 years ago
- fastjson全版本漏洞利用工具，只支持POST☆10Jan 5, 2021Updated 5 years ago
- 阿里天池AI安全挑战第一期人脸识别攻击☆10Jun 26, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 自研JavaFX图形化漏洞扫描工具，支持ThinkPHP 2.x RCE，Thinkphp5 5.0.22/5.1.29RCE，ThinkPHP5 5.0.23RCE和ThinkPHP5 SQL注入漏洞和敏感信息泄露漏洞的漏洞检测，以及命令执行的功能。漏洞POC基本适用Th…☆17May 19, 2022Updated 4 years ago
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆11Nov 16, 2019Updated 6 years ago
- 一款在红蓝对抗中快速对目标单位进行资产探测和基本扫描的工具☆66Nov 29, 2023Updated 2 years ago
- 一些Python安全开发的小demo。☆15Dec 14, 2021Updated 4 years ago
- go语言编写的一款基于json格式poc的漏洞利用工具☆24Apr 28, 2021Updated 5 years ago
- 基于javafx UI界面实现的android apk自动化批量反编译工具。运行后直接将apk文件拖入程序内，即可完成对dex和res反编译操作。☆24Dec 7, 2019Updated 6 years ago
- 爬取阿里云安全平台做漏洞预警库，并同步到邮箱和飞书☆23Apr 24, 2022Updated 4 years ago
- 一个java代码审计辅助工具☆27Nov 2, 2022Updated 4 years ago
- 一个专门用于开发安全工具的HTTP类库.☆23Dec 5, 2019Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Burp suite 插件 实现参数溢出、垃圾数据、字典笛卡尔积☆29Feb 9, 2022Updated 4 years ago
- CobaltStrike上线通知，飞书群聊机器人、server酱通知☆85Feb 2, 2023Updated 3 years ago
- 基于JavaFx编写的C/S图形化界面漏洞验证工具集。☆24Dec 30, 2021Updated 4 years ago
- Seay源代码审计系统2.1源码☆22Jul 17, 2019Updated 7 years ago
- 一个全新的敏感文件发现工具☆27Jan 7, 2021Updated 5 years ago
- 解决使用默认密码webshell的问题☆26Jan 20, 2022Updated 4 years ago
- 漏洞检测与利用常见api库☆34Nov 20, 2022Updated 3 years ago
- 规则组合子域名字典生成☆30Mar 5, 2020Updated 6 years ago
- 一种轻松扩展 QQ 的标准化框架 ——OICQ 的好朋友☆27Apr 10, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 整合nuclei与xray(社区版、自带高级版)，实现被动扫描+poc扫描自动化渗透流程☆70Apr 8, 2022Updated 4 years ago
- ☆12Dec 10, 2025Updated 10 months ago
- 安全数据库系统☆25Dec 9, 2020Updated 5 years ago
- pcap数据包文件可视化分析工具，可以获取明文数据包中的敏感信息☆27Apr 20, 2017Updated 9 years ago
- 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.☆12Sep 30, 2026Updated last month
- thinkphp5 RCE auto exploit☆11Jun 19, 2019Updated 7 years ago
- DarkTide-暗涌免杀社区版☆12Apr 15, 2026Updated 6 months ago
- 使用golang编写的服务弱口令检测☆41Apr 25, 2023Updated 3 years ago
- 2011-2019年Top100弱口令密码字典 Top1000密码字典 服务器SSH/VPS密码字典 后台管理密码字典 数据库密码字典 子域名字典☆13Aug 26, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 果酱圈子：一款可媲美 “知识星球” 的赋能社群运营者的平台☆11Feb 16, 2022Updated 4 years ago
- The Etherum RPC Steal Toolset and honeypot .以太坊"偷渡"漏洞利用和蜜罐工具集.☆39Jan 23, 2019Updated 7 years ago
- Python 版 JustAuth，期待你的加入☆10Jun 11, 2021Updated 5 years ago
- 用c#实现了个远程拉取Mimikatz.ps1☆60Dec 7, 2023Updated 2 years ago
- 一些渗透测试学习笔记☆13Jul 22, 2022Updated 4 years ago
- ☆14Aug 4, 2021Updated 5 years ago
- Java安全相关，目前主要是CC链研究☆10Sep 1, 2022Updated 4 years ago