Ares-X/VulWiki external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Ares-X/VulWiki

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Ares-X/VulWiki)

Close

Ares-X / VulWikiView on GitHubMore

• External links
• Readme badge

VulWiki

☆216Jun 20, 2026Updated 3 months ago

Alternatives and similar repositories for VulWiki

Users that are interested in VulWiki are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• Imanfeng / Apache-Solr-RCE

  View on GitHub
  Apache Solr Exploits 🌟
  ☆344Oct 13, 2020Updated 5 years ago
• shmilylty / vhost_password_decrypt

  View on GitHub
  vhost password decrypt
  ☆259Oct 9, 2024Updated last year
• r0eXpeR / redteam_vul

  View on GitHub
  红队作战中比较常遇到的一些重点系统漏洞整理。
  ☆2,523Jul 17, 2021Updated 5 years ago
• CTF-MissFeng / GoScan

  View on GitHub
  GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用
  ☆711May 6, 2021Updated 5 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,397Jan 18, 2022Updated 4 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,019May 21, 2024Updated 2 years ago
• MrWQ / vulnerability-paper

  View on GitHub
  收集的文章 https://mrwq.github.io/tools/paper/
  ☆2,048Apr 1, 2026Updated 5 months ago
• cnrstar / anti-honeypot

  View on GitHub
  一款可以检测WEB蜜罐并阻断请求的Chrome插件
  ☆890Aug 5, 2024Updated 2 years ago
• SkyBlueEternal / thinkphp-RCE-POC-Collection

  View on GitHub
  thinkphp v5.x 远程代码执行漏洞-POC集合
  ☆1,193Jan 15, 2019Updated 7 years ago
• BaizeSec / bylibrary

  View on GitHub
  白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目
  ☆1,500Oct 12, 2023Updated 2 years ago
• zha0gongz1 / Pentest_MindMap

  View on GitHub
  个人翻译/总结渗透测试思维导图
  ☆29Jun 15, 2022Updated 4 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,006Oct 15, 2020Updated 5 years ago
• Adminisme / ServerScan

  View on GitHub
  ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
  ☆1,657Jun 16, 2024Updated 2 years ago
• uknowsec / SharpSQLTools

  View on GitHub
  SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
  ☆970Aug 5, 2021Updated 5 years ago
• End-to-end encrypted cloud storage - Proton Drive • Ad
  Special offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
• pmiaowu / log4j2Scan

  View on GitHub
  用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件
  ☆208Apr 18, 2023Updated 3 years ago
• SummerSec / SpringBootExploit

  View on GitHub
  项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。
  ☆1,892Jan 15, 2024Updated 2 years ago
• woodpecker-framework / woodpecker-framework-release

  View on GitHub
  高危漏洞精准检测与深度利用框架
  ☆1,463Jan 8, 2023Updated 3 years ago
• whwlsfb / Log4j2Scan

  View on GitHub
  Log4j2 RCE Passive Scanner plugin for BurpSuite
  ☆832Aug 4, 2023Updated 3 years ago
• DeEpinGh0st / Erebus

  View on GitHub
  CobaltStrike后渗透测试插件
  ☆1,571Oct 28, 2021Updated 4 years ago
• Maskhe / FastjsonScan

  View on GitHub
  一个简单的Fastjson反序列化检测burp插件
  ☆980Jun 18, 2021Updated 5 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆529Aug 25, 2020Updated 6 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆440Mar 23, 2026Updated 6 months ago
• feihong-cs / ShiroExploit-Deprecated

  View on GitHub
  Shiro550/Shiro721 一键化利用工具，支持多种回显方式
  ☆1,956Jun 4, 2021Updated 5 years ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• xinyu2428 / TDOA_RCE

  View on GitHub
  通达OA综合利用工具
  ☆519Mar 17, 2021Updated 5 years ago
• bitterzzZZ / MemoryShellLearn

  View on GitHub
  分享几个直接可用的内存马，记录一下学习过程中看过的文章
  ☆976Mar 23, 2022Updated 4 years ago
• hosch3n / FastjsonVulns

  View on GitHub
  ☆92Jul 22, 2026Updated 2 months ago
• XTeam-Wing / RedTeaming2020

  View on GitHub
  RedTeaming知识星球2020年安全知识汇总
  ☆471May 5, 2021Updated 5 years ago
• zhzyker / exphub

  View on GitHub
  Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…
  ☆4,294Apr 4, 2021Updated 5 years ago
• aleenzz / Cobalt_Strike_wiki

  View on GitHub
  Cobalt Strike系列
  ☆2,434Dec 3, 2023Updated 2 years ago
• SkewwG / domainTools

  View on GitHub
  内网域渗透小工具
  ☆732Apr 20, 2021Updated 5 years ago
• hayasec / 360SafeBrowsergetpass

  View on GitHub
  这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
  ☆632Apr 4, 2021Updated 5 years ago
• a1phaboy / FastjsonScan

  View on GitHub
  Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
  ☆1,051Oct 7, 2022Updated 3 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• Ares-X / shiro-exploit

  View on GitHub
  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
  ☆893May 28, 2021Updated 5 years ago
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,029Jan 3, 2025Updated last year
• kelvinBen / AppInfoScanner

  View on GitHub
  一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN…
  ☆3,560Updated this week
• r35tart / RedisWriteFile

  View on GitHub
  通过 Redis 主从写出无损文件
  ☆718May 25, 2020Updated 6 years ago
• shack2 / skyscorpion

  View on GitHub
  新版将不再对外公开发布。天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端，支持跨平台运行，目前基于JDK1.8开发，运行必须安装JDK或JRE 1.8，注意不能是open jdk，只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebSh…
  ☆385Mar 22, 2021Updated 5 years ago
• Mochazz / ThinkPHP-Vuln

  View on GitHub
  关于ThinkPHP框架的历史漏洞分析集合
  ☆1,121Jan 18, 2020Updated 6 years ago
• Daybr4ak / C2ReverseProxy

  View on GitHub
  一款可以在不出网的环境下进行反向代理及cs上线的工具
  ☆492Apr 26, 2023Updated 3 years ago