一款基于JAVA编写的插件化漏洞利用工具
☆46Jul 30, 2025Updated 11 months ago
Alternatives and similar repositories for CandleDragon
Users that are interested in CandleDragon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆21Oct 19, 2022Updated 3 years ago
- 一个基于JavaFX写的一个Hunter资产测绘平台的图形化工具☆121Nov 9, 2022Updated 3 years ago
- ☆125Jul 21, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆13Feb 4, 2024Updated 2 years ago
- javafx练习,JS接口提取,漏洞检测☆236Jan 24, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 通达OA漏洞检测工具-TongdaScan_go☆220May 27, 2023Updated 3 years ago
- 帆软bi反序列化漏洞利用工具☆55Jun 4, 2024Updated 2 years ago
- suo5的二开改进，一款高性能，代码标准的 HTTP 代理隧道工具☆80Sep 5, 2025Updated 10 months ago
- jmx未授权访问 弱口令批量检测 GUI工具☆31Apr 28, 2023Updated 3 years ago
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆264Feb 15, 2026Updated 5 months ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆21Sep 28, 2022Updated 3 years ago
- weblogic批量打入内存马，electron+vue3+springboot实现。☆53Mar 13, 2024Updated 2 years ago
- 魔改版，实现冰蝎直连内存马，无需修改冰蝎客户端☆76Jan 3, 2024Updated 2 years ago
- 广联达OA系统漏洞批量检测工具☆18Nov 3, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- rmi打内存马工具，适用于目标用不了ldap的情况☆257Jul 12, 2023Updated 3 years ago
- 自用目录扫描☆50Jun 19, 2021Updated 5 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆55Sep 6, 2022Updated 3 years ago
- Code By:Tas9er / FFICreateAdminUser / FFI绕杀软添加Windows账号☆43May 21, 2026Updated 2 months ago
- EMQX Dashboard Malicious Plugin leading to RCE☆47Jun 16, 2025Updated last year
- A C#-based webshell management tool for penetration testing.☆149Updated this week
- 一个介于目录扫描与poc验证之间的新生儿☆20Dec 6, 2022Updated 3 years ago
- 发布一些我发现的漏洞以及利用脚本。☆15Jun 29, 2023Updated 3 years ago
- 集权利用工具☆167Feb 28, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- 收集本人自接触渗透测试用于漏洞验证的所有热门CVE、POC、CNVD攻击有效载荷+测试工具+FUZZ,一个仓库满足许多攻击测试场景,开箱即用.☆174Oct 23, 2025Updated 8 months ago
- ☆140Sep 25, 2023Updated 2 years ago
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆185May 10, 2023Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE 加载字节 码 注入内存马 不出网利用☆853Jul 7, 2023Updated 3 years ago
- simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。☆102Mar 24, 2026Updated 3 months ago
- 基于Java开发的代码字符串搜索工具，用于辅助快速代码审计，筛选危险方法名称搜索代码中可能存在的漏洞☆39Mar 7, 2026Updated 4 months ago
- exchange接口爆破|邮箱爆破☆20Sep 19, 2024Updated last year
- sqlmap命令生成器☆20Nov 12, 2024Updated last year
- 哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。☆175Oct 8, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 禅道认证绕过后台命令执行Getshell☆13Jan 8, 2025Updated last year
- confluence CVE-2023-22527 漏洞利用工具，支持冰蝎/哥斯拉内存马注入，支持设置 http 代理☆40Apr 24, 2024Updated 2 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆142Nov 30, 2022Updated 3 years ago
- 利用api来查询用户的star，仓库的commits、releases、issus。查询关键字更新☆12Mar 7, 2021Updated 5 years ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆572Apr 3, 2026Updated 3 months ago
- 支持自定义Poc文件的图形化漏洞利用工具☆239Nov 5, 2024Updated last year
- 常见的未授权漏洞检测☆275Apr 5, 2025Updated last year