基于alpine+php7.3的一个RCE命令执行靶场,包含基础命令、shell 特性、常见姿势、常见waf绕过
☆56Nov 18, 2025Updated 5 months ago
Alternatives and similar repositories for rce-labs
Users that are interested in rce-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一款最全未授权访问漏洞批量检测工具,集成40+常见未授权访问漏洞;使用PYQT6,为其添加了GUI界面☆110Jul 31, 2025Updated 8 months ago
- CVE-2025-54424:1Panel 客户端证书绕过RCE漏洞 一体化工具 (扫描+利用)☆58Aug 5, 2025Updated 8 months ago
- 应急分析溯源日志工具:一个功能强大的Web日志安全分析工具,集成了规则引擎、AI智能分析和多格式报告生成,专为安全应急响应和威胁溯源而设计。☆113Mar 23, 2026Updated 3 weeks ago
- 通达OA OfficeTask udp 2397 端口远程代码执行RCE检测工具☆22Jun 13, 2025Updated 10 months ago
- 海康威视iSecure后渗透☆30Aug 13, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆16Feb 20, 2025Updated last year
- 基于Pocsuite3、goby编写的漏洞poc&exp存档☆12Nov 19, 2023Updated 2 years ago
- redis图形化漏洞利用工具☆29Mar 24, 2026Updated 3 weeks ago
- 本项目是一个以“实战为导向”的 XSS 漏洞 练习靶场,覆盖反射型、存储型、DOM 型、SVG、CSP、框架注入、协议绕过等多种场景。页面样式统一,逻辑清晰,适合系统化学习与教学演示☆31Mar 6, 2026Updated last month
- BpArsenal, a Burp Suite plugin that can quickly convert http requests into command-line tool execution, launch third-party tools and open…☆22Oct 31, 2025Updated 5 months ago
- This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to s…☆11May 24, 2024Updated last year
- JWT密码爆破以及生成工具,可以使用字典或者暴力破解JWT,支持多线程爆破,使用GO语言编写,效率非常高,也可以生成有密码或者没有密码的JWT。☆29Sep 26, 2025Updated 6 months ago
- Asset inventory of over 800 public bug bounty programs.☆12Jun 12, 2023Updated 2 years ago
- 一款支持检测web应用程序未授权访问缺陷的burp suite插件,可自定义配置检测字段以及返回包json数据分析☆12Apr 22, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 哥斯拉Godzilla定制化插件,接收恶意类Base64编码与恶意类类名进行实例化,达到注入任意类型内存马的目的。☆45Dec 30, 2025Updated 3 months ago
- CVE-2023-52251 There is a Remote Code Execution vulnerability provectus/kafka-ui.☆21Jan 23, 2024Updated 2 years ago
- 自己零零散散研究以及收集的一些免杀技巧,以便为后续查阅,拓宽思路☆15Dec 11, 2019Updated 6 years ago
- 本书为《C++17 the complete guide》的个人中文翻译,仅供学习和交流使用,侵删☆11Oct 28, 2020Updated 5 years ago
- sf is an efficient subdomain brute-forcing tool☆16Oct 13, 2023Updated 2 years ago
- 编码解码工具☆21Jan 7, 2025Updated last year
- CVE-2021-33766-poc☆10Sep 15, 2021Updated 4 years ago
- 大华智慧园区系统sso_initsession文件上传批量脚本☆22Sep 4, 2023Updated 2 years ago
- ☆19Aug 25, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Mazesec团队自制靶机题解仓库,专注于分享HackMyVM平台的自制靶机PDF题解,涵盖渗透测试实战与安全研究,供学习交流使用。☆72Updated this week
- Cobalt Strike 插件包,超级缝合怪...☆11Jul 11, 2025Updated 9 months ago
- 【Hello-CTF labs】开箱即用的多靶场集成虚拟机,你只管刷题,剩下的交给我~☆11Mar 10, 2025Updated last year
- 用于绕过杀软的加载器☆31Oct 13, 2025Updated 6 months ago
- tomcat的servlet、filter、listener内存马查杀工具☆38Sep 20, 2023Updated 2 years ago
- Multi-algo CPUMiner & Reference Cryptonote Miner (JSON-RPC 2.0)☆17Jan 25, 2018Updated 8 years ago
- 内容包括2021/2022/期间的漏洞详情及poc,hw扣分规则☆18Aug 10, 2023Updated 2 years ago
- ☆16May 17, 2024Updated last year
- Visual Studio .suo文件反序列化漏洞利用工具☆17Jun 28, 2025Updated 9 months ago
- Serverless GPU API endpoints on Runpod - Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 一个红队知识仓库☆11Aug 1, 2023Updated 2 years ago
- Gathery 是一款基于 PyQt5 开发的网络安全信息收集与分析工具,集成了多种实用的信息收集功能和小工具,帮助安全研究人员、渗透测试人员和网络管理员快速收集目标信息☆19Jun 22, 2025Updated 9 months ago
- Muki is an active asset fingerprinting tool built for red teams — powered by 30,000+ precision signatures, proxy rotation, and intelligen…☆110Jan 13, 2026Updated 3 months ago
- ☆17Updated this week
- This is a Sharp assembly loader in PowerShell☆13Oct 23, 2025Updated 5 months ago
- NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具,主要用于在代码审计和绕鉴权场景中节省时间☆22Mar 27, 2026Updated 3 weeks ago
- 🔧 AI-powered JS逆向工程 Skill —— 覆盖加密还原、混淆分析、动态Cookie、WASM逆向、协议对抗等全链路场景,通过 Node.js 实现算法还原与模拟请求。适配 Claude Code / Claude.ai / 其他AI编码工具☆119Apr 3, 2026Updated 2 weeks ago