国光师傅的SSRF靶场docker环境
☆45Sep 18, 2024Updated last year
Alternatives and similar repositories for ssrf_vul
Users that are interested in ssrf_vul are comparing it to the libraries listed below
Sorting:
- 国光的手把手带你用 SSRF 打穿内网靶场源码☆410May 10, 2021Updated 4 years ago
- 自学时写的适合Java安全小白用来学习Java反序列化漏洞的文章和Demo。(随懒狗的学习进度持续更新🐶)。Some articles and demos written during self-study which are suitable for Java Secu…☆12Dec 22, 2021Updated 4 years ago
- spring-core单个图形化利用工具,CVE-2022-22965及修复方案已出☆17Apr 2, 2022Updated 3 years ago
- Alibab Nacos Unauthorized Login☆14Mar 16, 2023Updated 3 years ago
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- 基于Agent技术实现的Java内存马查杀、防护工具。☆94Jul 25, 2024Updated last year
- Supershell反制☆32Aug 8, 2023Updated 2 years ago
- 基于python和httpscan的多端口c段扫描器☆15Nov 20, 2020Updated 5 years ago
- 根据goby查重poc的接口实现,可以当做漏洞库索引,查缺补漏☆13Aug 12, 2022Updated 3 years ago
- 第十七届全国大学生信息安全竞赛创新实践能力赛决赛 - AWDP☆11Jul 20, 2024Updated last year
- 一款Java内存马生成、测试工具,搭配@ax1sX的MemShell食用。☆262Feb 15, 2026Updated last month
- fastjson利用,支持tomcat、spring回显,哥斯拉内存马;回显利用链为dhcp、ibatis、c3p0。☆327Mar 15, 2022Updated 4 years ago
- CVE-2020-14882批量验证工具。☆12Dec 1, 2020Updated 5 years ago
- ☆33Jul 26, 2024Updated last year
- 改造一个基于jrmp的AMF反序列化利用工具☆16Jul 7, 2022Updated 3 years ago
- XXST-白加黑辅助挖掘工具,全程静默运行不影响正常使用☆17Apr 12, 2024Updated last year
- ☆197Sep 26, 2024Updated last year
- 先是渗透工具合集,其次是wiki,做点不一样的x☆36Jun 24, 2023Updated 2 years ago
- 渗透测试目录扫描字典☆69Updated this week
- go实现的shellcode免杀加载器,实测时可过火绒,360。当前效果请自行评判。☆47Sep 11, 2024Updated last year
- LoaderGo-快速生成免杀木马GUI版本,bypass主流杀软☆159Dec 21, 2023Updated 2 years ago
- 个人学习Java安全的笔记☆130May 5, 2023Updated 2 years ago
- Nacos Derby命令执行漏洞利用脚本☆150Apr 7, 2025Updated 11 months ago
- 标准化AWD靶场Docker☆44May 15, 2021Updated 4 years ago
- 通过生成不同hash的ico并写入程序中,实现批量bypass360QVM☆259Aug 10, 2023Updated 2 years ago
- DockerApiRCE☆235Oct 22, 2024Updated last year
- 一个可以扩展的github源码监控系统☆18Aug 28, 2019Updated 6 years ago
- 适用AWD-WEB的各种场景下的攻击框架。☆22May 26, 2023Updated 2 years ago
- AWD平台☆24Aug 18, 2021Updated 4 years ago
- 用docker 迅速部署自己的xss平台☆25Aug 29, 2020Updated 5 years ago
- CVE-2022-22947 memshell☆19Mar 18, 2022Updated 4 years ago
- A simple webhook server☆12May 25, 2021Updated 4 years ago
- Burp插 件 TLA Watcher:分为两个模块:流量管理模块、扩展功能模块(脆弱风险检测)☆39Nov 13, 2025Updated 4 months ago
- vcenter图形化漏洞利用工具☆70Nov 17, 2024Updated last year
- This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容,用于SSRF等利用。☆120Jul 11, 2019Updated 6 years ago
- Gscan is a high concurrency scanner based on golang☆79Jan 12, 2020Updated 6 years ago
- 红队应急响应工具(支持麒麟系统)☆54Aug 13, 2025Updated 7 months ago
- 亿赛通电子文档安全管理系统-/UploadFileFromClientServiceForClient 任意文件上传漏洞☆13Aug 15, 2023Updated 2 years ago
- 工控设备信息识别工具箱☆56Dec 4, 2025Updated 3 months ago