DSO-Lab/defvul external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

DSO-Lab/defvul

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/DSO-Lab/defvul)

Close

DSO-Lab / defvulView on GitHubMore

• External links
• Readme badge

DSO-Lab 漏洞研究成果整理

☆83Aug 5, 2022Updated 3 years ago

Alternatives and similar repositories for defvul

Users that are interested in defvul are comparing it to the libraries listed below

• hktalent / CVE-2020-2551

  View on GitHub
  how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP
  ☆211Mar 5, 2023Updated 2 years ago
• skytina / CVE-2021-21978

  View on GitHub
  带回显版本的漏洞利用脚本
  ☆25Mar 5, 2021Updated 4 years ago
• hktalent / CVE_2020_2546

  View on GitHub
  CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc pyth…
  ☆133Mar 5, 2023Updated 2 years ago
• rufherg / WebLogic_Basic_Poc

  View on GitHub
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆94Nov 4, 2020Updated 5 years ago
• potats0 / cve_2020_14644

  View on GitHub
  ☆69Aug 11, 2020Updated 5 years ago
• ggg4566 / PocStart

  View on GitHub
  轻量级漏洞验证和利用框架
  ☆32May 10, 2022Updated 3 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,012May 21, 2024Updated last year
• ianxtianxt / Flash-player

  View on GitHub
  flash钓鱼源码 中文+英文
  ☆33Dec 9, 2019Updated 6 years ago
• TomAPU / poc_and_exp

  View on GitHub
  搜集的或者自己写的poc或者exp
  ☆205Sep 27, 2022Updated 3 years ago
• potats0 / shiroPoc

  View on GitHub
  ☆318Jun 4, 2021Updated 4 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,016Oct 15, 2020Updated 5 years ago
• orleven / Hamster

  View on GitHub
  Hamster是基于mitmproxy开发的异步被动扫描框架，基于http代理进行被动扫描，主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能（开发中）。
  ☆69Oct 31, 2024Updated last year
• SummerSec / SpringExploit

  View on GitHub
  🚀 一款为了学习go而诞生的漏洞利用工具
  ☆450Jun 14, 2022Updated 3 years ago
• Dido1960 / thinkphp

  View on GitHub
  thinkphp反序列化漏洞复现及POC编写
  ☆130Nov 18, 2019Updated 6 years ago
• horizon3ai / vRealizeLogInsightRCE

  View on GitHub
  POC for RCE using vulnerabilities described in VMSA-2023-0001
  ☆148Jan 31, 2023Updated 3 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• Artemis1029 / Java_xmlhack

  View on GitHub
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆167Apr 5, 2019Updated 6 years ago
• jiangsir404 / POC-S

  View on GitHub
  POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC
  ☆357Mar 12, 2020Updated 5 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆535Aug 25, 2020Updated 5 years ago
• FunnyWolf / pystinger

  View on GitHub
  Bypass firewall for traffic forwarding using webshell
  ☆1,430Sep 29, 2021Updated 4 years ago
• uknowsec / SharpToolsAggressor

  View on GitHub
  内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~
  ☆498Feb 13, 2020Updated 6 years ago
• r00tSe7en / Flash-Pop

  View on GitHub
  Flash钓鱼弹窗优化版
  ☆642Nov 18, 2022Updated 3 years ago
• fupinglee / JavaTools

  View on GitHub
  一些Java编写的小工具。
  ☆318Aug 5, 2021Updated 4 years ago
• broken5 / WebAliveScan

  View on GitHub
  对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描
  ☆915Dec 8, 2022Updated 3 years ago
• NS-Sp4ce / TongDaOA-Fake-User

  View on GitHub
  通达OA 任意用户登录漏洞
  ☆360Aug 27, 2020Updated 5 years ago
• Gamma-laboratory / JsFak

  View on GitHub
  This is a js front-end encryption blasting account and password tools，Because it calls JS in a clever way without us having to analyze th…
  ☆77Dec 13, 2020Updated 5 years ago
• wuppp / cve-2021-45232-exp

  View on GitHub
  ☆78Dec 31, 2021Updated 4 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆754Apr 14, 2021Updated 4 years ago
• hayasec / 360SafeBrowsergetpass

  View on GitHub
  这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
  ☆638Apr 4, 2021Updated 4 years ago
• ShiHuang-ESec / EHole

  View on GitHub
  EHole(棱洞)-红队重点攻击系统指纹探测工具
  ☆471Jan 27, 2021Updated 5 years ago
• uknowsec / SweetPotato

  View on GitHub
  Modifying SweetPotato to support load shellcode and webshell
  ☆787Jun 2, 2021Updated 4 years ago
• langligelang / CAS_EXP

  View on GitHub
  CAS 硬编码 远程代码执行漏洞
  ☆125Jun 4, 2021Updated 4 years ago
• shack2 / skyscorpion

  View on GitHub
  新版将不再对外公开发布。天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端，支持跨平台运行，目前基于JDK1.8开发，运行必须安装JDK或JRE 1.8，注意不能是open jdk，只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebSh…
  ☆387Mar 22, 2021Updated 4 years ago
• threedr3am / learnjavabug

  View on GitHub
  Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
  ☆2,689Mar 14, 2024Updated last year
• akkuman / HunterApi

  View on GitHub
  奇安信的网络空间测绘引擎 hunter 的 api 查询导出工具
  ☆76Oct 27, 2021Updated 4 years ago
• grayddq / EBurst

  View on GitHub
  这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。
  ☆339May 22, 2023Updated 2 years ago
• hosch3n / ProxyVulns

  View on GitHub
  [ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains.…
  ☆177Oct 21, 2022Updated 3 years ago
• uknowsec / loginlog_windows

  View on GitHub
  读取登录过本机的登录失败或登录成功的所有计算机信息，在内网渗透中快速定位运维管理人员。
  ☆221Sep 30, 2019Updated 6 years ago
• xiaoheiwo / GGSCAN

  View on GitHub
  一款渗透时快速资产探测工具
  ☆220Sep 17, 2021Updated 4 years ago