一款基于JAVA编写的插件化漏洞利用工具
☆46Jul 30, 2025Updated last year
Alternatives and similar repositories for CandleDragon
Users that are interested in CandleDragon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆20Oct 19, 2022Updated 3 years ago
- 一个基于JavaFX写的一个Hunter资产测绘平台的图形化工具☆120Nov 9, 2022Updated 3 years ago
- ☆124Jul 21, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- javafx练习,JS接口提取,漏洞检测☆233Jan 24, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 通达OA漏洞检测工具-TongdaScan_go☆218May 27, 2023Updated 3 years ago
- 帆软bi反序列化漏洞利用工具☆54Jun 4, 2024Updated 2 years ago
- suo5的二开改进，一款高性能，代码标准的 HTTP 代理隧道工具☆78Sep 5, 2025Updated last year
- jmx未授权访问 弱口令批量检测 GUI工具☆30Apr 28, 2023Updated 3 years ago
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆265Feb 15, 2026Updated 7 months ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆21Sep 28, 2022Updated 4 years ago
- 魔改版，实现冰蝎直连内存马，无需修改冰蝎客户端☆75Jan 3, 2024Updated 2 years ago
- weblogic批量打入内存马，electron+vue3+springboot实现。☆53Mar 13, 2024Updated 2 years ago
- 广联达OA系统漏洞批量检测工具☆18Nov 3, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- rmi打内存马工具，适用于目标用不了ldap的情况☆252Jul 12, 2023Updated 3 years ago
- 自用目录扫描☆50Jun 19, 2021Updated 5 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆55Sep 6, 2022Updated 4 years ago
- EMQX Dashboard Malicious Plugin leading to RCE☆47Jun 16, 2025Updated last year
- 集权利用工具☆165Feb 28, 2025Updated last year
- 发布一些我发现的漏洞以及利用脚本。☆15Jun 29, 2023Updated 3 years ago
- 一个介于目录扫描与poc验证之间的新生儿☆20Dec 6, 2022Updated 3 years ago
- 收集本人自接触渗透测试用于漏洞验证的所有热门CVE、POC、CNVD攻击有效载荷+测试工具+FUZZ,一个仓库满足许多攻击测试场景,开箱即用.☆171Oct 23, 2025Updated 11 months ago
- ☆136Sep 25, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆187May 10, 2023Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用☆854Jul 7, 2023Updated 3 years ago
- simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。☆100Mar 24, 2026Updated 6 months ago
- 基于Java开发的代码字符串搜索工具，用于辅助快速代码审计，筛选危险方法名称搜索代码中可能存在的漏洞☆37Mar 7, 2026Updated 7 months ago
- exchange接口爆破|邮箱爆破☆18Sep 19, 2024Updated 2 years ago
- sqlmap命令生成器☆20Nov 12, 2024Updated last year
- 哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。☆175Oct 8, 2024Updated 2 years ago
- 禅道认证绕过后台命令执行Getshell☆14Jan 8, 2025Updated last year
- confluence CVE-2023-22527 漏洞利用工具，支持冰蝎/哥斯拉内存马注入，支持设置 http 代理☆40Apr 24, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Cobalt Strike BOF that Add a user to localgroup by samr☆142Nov 30, 2022Updated 3 years ago
- 利用api来查询用户的star，仓库的commits、releases、issus。查询关键字更新☆12Mar 7, 2021Updated 5 years ago
- 支持自定义Poc文件的图形化漏洞利用工具☆235Nov 5, 2024Updated last year
- 一款可以高度自定义的 API 信息收集与记录 Burp扩展套件☆12Dec 1, 2024Updated last year
- 常见的未授权漏洞检测☆278Apr 5, 2025Updated last year
- flash钓鱼 flash水坑攻击最新版源码☆65Feb 10, 2023Updated 3 years ago
- DockerRemoteAPI未授权访问(2375端口)利用工具，支持容器逃逸☆69Dec 29, 2024Updated last year