DSO-Lab 漏洞研究成果整理
☆83Aug 5, 2022Updated 3 years ago
Alternatives and similar repositories for defvul
Users that are interested in defvul are comparing it to the libraries listed below
Sorting:
- flash钓鱼源码 中文+英文☆33Dec 9, 2019Updated 6 years ago
- how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP☆211Mar 5, 2023Updated 3 years ago
- 带回显版本的漏洞利用脚本☆25Mar 5, 2021Updated 5 years ago
- Passets 是一套开源的被动资产识别框架。☆49Dec 9, 2020Updated 5 years ago
- ☆69Aug 11, 2020Updated 5 years ago
- 轻量级漏洞验证和利用框架☆32May 10, 2022Updated 3 years ago
- 用于WebLogic poc及exp测试的基础脚本,后续将集成各版本poc库☆94Nov 4, 2020Updated 5 years ago
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具☆2,014May 21, 2024Updated last year
- CVE-2020-2546,CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc pyth…☆133Mar 5, 2023Updated 3 years ago
- 搜集的或者自己写的poc或者exp☆206Sep 27, 2022Updated 3 years ago
- ☆318Jun 4, 2021Updated 4 years ago
- fastjson 1.2.68 版本 autotype bypass☆142Jun 17, 2022Updated 3 years ago
- Passets 被动资产识别框架数据清洗模块。☆12Nov 26, 2020Updated 5 years ago
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- 一款渗透时快速资产探测工具☆220Sep 17, 2021Updated 4 years ago
- 通达OA 任意用户登录漏洞☆359Aug 27, 2020Updated 5 years ago
- 对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描☆913Dec 8, 2022Updated 3 years ago
- ☆78Dec 31, 2021Updated 4 years ago
- POC for RCE using vulnerabilities described in VMSA-2023-0001☆148Jan 31, 2023Updated 3 years ago
- Hamster是基于mitmproxy开发的异步被动扫描框架,基于http代理进行被动扫描,主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能(开发中)。☆69Oct 31, 2024Updated last year
- Bypass firewall for traffic forwarding using webshell☆1,430Sep 29, 2021Updated 4 years ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆451Jun 14, 2022Updated 3 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞, 对功能进行强化以及脚本进行分类添加,自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆357Mar 12, 2020Updated 6 years ago
- scrapy website Article and link ...☆15Dec 13, 2020Updated 5 years ago
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞,一键注册蚁剑filter内存shell☆535Aug 25, 2020Updated 5 years ago
- Flash钓鱼弹窗优化版☆642Nov 18, 2022Updated 3 years ago
- ☆15Jul 5, 2020Updated 5 years ago
- CVE-2021-34371.jar☆32Sep 6, 2021Updated 4 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- 奇安信的网络空间测绘引擎 hunter 的 api 查询导出工具☆76Oct 27, 2021Updated 4 years ago
- thinkphp反序列化漏洞复现及POC编写☆130Nov 18, 2019Updated 6 years ago
- 这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具,用于节省红队工作量,通过下载浏览器数据库、记录密钥来离线解密浏览器密码。☆637Apr 4, 2021Updated 4 years ago
- Modifying SweetPotato to support load shellcode and webshell☆788Jun 2, 2021Updated 4 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- 一些Java编写的小工具。☆317Aug 5, 2021Updated 4 years ago
- burpsuite extension for check unauthorized vulnerability☆238Oct 7, 2020Updated 5 years ago
- EHole(棱洞)-红队重点攻击系统指纹探测工具☆471Jan 27, 2021Updated 5 years ago
- 这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。☆339May 22, 2023Updated 2 years ago
- 内网渗透中常用的c#程序整合成cs脚本,直接内存加载。持续更新~☆499Feb 13, 2020Updated 6 years ago