一款基于JAVA编写的插件化漏洞利用工具
☆46Jul 30, 2025Updated last year
Alternatives and similar repositories for CandleDragon
Users that are interested in CandleDragon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个基于JavaFX写的一个Hunter资产测绘平台的图形化工具☆120Nov 9, 2022Updated 3 years ago
- ☆20Oct 19, 2022Updated 4 years ago
- ☆124Jul 21, 2024Updated 2 years ago
- javafx练习,JS接口提取,漏洞检测☆232Jan 24, 2024Updated 2 years ago
- 通达OA漏洞检测工具-TongdaScan_go☆218May 27, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。☆103Mar 24, 2026Updated 7 months ago
- suo5的二开改进，一款高性能，代码标准的 HTTP 代理隧道工具☆77Sep 5, 2025Updated last year
- 帆软bi反序列化漏洞利用工具☆55Jun 4, 2024Updated 2 years ago
- jmx未授权访问 弱口令批量检测 GUI工具☆30Apr 28, 2023Updated 3 years ago
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆267Feb 15, 2026Updated 8 months ago
- weblogic批量打入内存马，electron+vue3+springboot实现。☆53Mar 13, 2024Updated 2 years ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆21Sep 28, 2022Updated 4 years ago
- ☆137Sep 25, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 自用目录扫描☆50Jun 19, 2021Updated 5 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 3 years ago
- 魔改版，实现冰蝎直连内存马，无需修改冰蝎客户端☆75Jan 3, 2024Updated 2 years ago
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆185May 10, 2023Updated 3 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆56Sep 6, 2022Updated 4 years ago
- Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含☆258Nov 15, 2022Updated 3 years ago
- EMQX Dashboard Malicious Plugin leading to RCE☆49Jun 16, 2025Updated last year
- 集权利用工具☆166Feb 28, 2025Updated last year
- 发布一些我发现的漏洞以及利用脚本。☆15Jun 29, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 收集本人自接触渗透测试用于漏洞验证的所有热门CVE、POC、CNVD攻击有效载荷+测试工具+FUZZ,一个仓库满足许多攻击测试场景,开箱即用.☆171Oct 23, 2025Updated last year
- Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用☆855Jul 7, 2023Updated 3 years ago
- 非常专业的漏洞POC管理、团队授权化漏洞管理、漏洞验证利用、漏洞批量利用框架。☆242Jan 19, 2023Updated 3 years ago
- Spring漏洞综合利用工具☆677Jun 26, 2026Updated 4 months ago
- 广联达OA系统漏洞批量检测工具☆18Nov 3, 2024Updated last year
- exchange接口爆破|邮箱爆破☆18Sep 19, 2024Updated 2 years ago
- 一个介于目录扫描与poc验证之间的新生儿☆20Dec 6, 2022Updated 3 years ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆573Sep 12, 2026Updated last month
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆124Aug 9, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 基于Java开发的代码字符串搜索工具，用于辅助快速代码审计，筛选危险方法名称搜索代码中可能存在的漏洞☆38Mar 7, 2026Updated 7 months ago
- 禅道认证绕过后台命令执行Getshell☆14Jan 8, 2025Updated last year
- 常见的未授权漏洞检测☆278Apr 5, 2025Updated last year
- confluence CVE-2023-22527 漏洞利用工具，支持冰蝎/哥斯拉内存马注入，支持设置 http 代理☆40Apr 24, 2024Updated 2 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内 存马注入☆775Jan 26, 2022Updated 4 years ago
- 绕过杀软dumphash 离线读取☆149Nov 6, 2024Updated last year
- 支持自定义Poc文件的图形化漏洞利用工具☆235Nov 5, 2024Updated last year