HeNrY4396/MatouWebshell external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

HeNrY4396/MatouWebshell

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/HeNrY4396/MatouWebshell)

Close

HeNrY4396 / MatouWebshellView on GitHubMore

• External links
• Readme badge

MatouWebshell 是一款基于 Vue 3 和 Python 开发的开源 Webshell 管理与利用平台。支持高度自定义的流量伪装、内网穿透及内存马注入等功能。项目具有极高的扩展性，非常欢迎安全研究人员基于此开源架构进行二次开发（如自定义修改 Payload、新增混淆规则等）。

☆23Apr 10, 2026Updated 5 months ago

Alternatives and similar repositories for MatouWebshell

Users that are interested in MatouWebshell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• hughink / Thinkphp-All-vuln

  View on GitHub
  ☆20Aug 28, 2022Updated 4 years ago
• TFour123 / Webpack_Insight

  View on GitHub
  用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。
  ☆41Sep 17, 2025Updated last year
• Zjingwen / v-jstools

  View on GitHub
  魔改v-jstools
  ☆17Sep 24, 2025Updated last year
• Pizz33 / Go_Processhider

  View on GitHub
  Go实现用于Windows系统的进程隐藏工具，通过DLL注入技术将指定进程从任务管理器中隐藏
  ☆30Jan 22, 2026Updated 8 months ago
• MInggongK / SpringbootGuiExploit

  View on GitHub
  SpringbootGuiExploit漏洞利用工具测试版
  ☆20Jun 7, 2024Updated 2 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• BBD-YZZ / GUI-TOOLS

  View on GitHub
  spring部分漏洞，nacos部分漏洞，禅道认证绕过漏洞
  ☆25May 28, 2024Updated 2 years ago
• Jaysen13 / jaysenscan

  View on GitHub
  基于 Burp Montoya API 开发的全能插件，集成自动化HTTP加解密、高危漏洞扫描（Fastjson/Log4j/Shiro/Spring未授权）与安全工具联动（sqlmap/xray），支持 Burp Collaborator 与 CEYE DNSLog，专为…
  ☆43Jun 11, 2026Updated 3 months ago
• unam4 / yso-mysqlpipe

  View on GitHub
  y4er的ysoserial修改版，加入mysql不出网pipe文件生成
  ☆28Jul 13, 2026Updated 2 months ago
• sh1yan / Sowhp

  View on GitHub
  一款网页批量截图工具
  ☆14Dec 20, 2024Updated last year
• winezer0 / jxBrowserBrute_Deprecated

  View on GitHub
  基于Java jxbrowser 浏览器的登录枚举测试工具 (支持验证码识别)
  ☆13Jul 10, 2025Updated last year
• emo-crab / observer_ward

  View on GitHub
  侦查守卫(observer_ward)Web应用和服务指纹识别工具 （之前误私有了仓库）
  ☆208Oct 1, 2026Updated last week
• 0x584A / Plumb

  View on GitHub
  一个轮子，用于渗透测试优化的 DNS/HTTP 日志工具，简洁、轻便、更易于使用。
  ☆16Sep 29, 2024Updated 2 years ago
• Axyanzzzz / TongWebEJBExploit

  View on GitHub
  TongWebEJB漏洞利用工具
  ☆32Apr 24, 2026Updated 5 months ago
• hieuminhnv / CVE-2022-21587-POC

  View on GitHub
  CVE-2022-21587 POC
  ☆15Feb 17, 2023Updated 3 years ago
• Bare Metal GPUs on DigitalOcean Gradient AI • Ad
  Purpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
• rambleZzz / jmxbfGUI

  View on GitHub
  jmx未授权访问 弱口令批量检测 GUI工具
  ☆30Apr 28, 2023Updated 3 years ago
• Kazaf6s / CVE-2022-23131

  View on GitHub
  CVE-2022-23131漏洞利用工具开箱即用。
  ☆11Apr 2, 2022Updated 4 years ago
• Sec-Fork / FindSubs

  View on GitHub
  基于Golang的高并发子域名收集工具，Censys API+Virustotal API被动收集+DNS爆破+CDN识别（红队实战工具）
  ☆13Apr 23, 2023Updated 3 years ago
• Bhanunamikaze / DPAPI_BOF

  View on GitHub
  SharpDPAPI ported to Cobalt Strike BOFs — 19 self-contained BOFs for DPAPI credential triage
  ☆18Feb 24, 2026Updated 7 months ago
• incredibleindishell / ysoserial.net-complied

  View on GitHub
  This repository contains complied exe of ysoserial.net ( ys.exe in directory ysoserial/bin/Debug). This work belongs to @pwntester bhai j…
  ☆12Dec 7, 2022Updated 3 years ago
• ph4ntonn / inject_und3ad

  View on GitHub
  👻inject_und3ad -- 蚁剑(AntSword)插件
  ☆24Aug 8, 2019Updated 7 years ago
• xiaokp7 / Tomcat_PUT_GUI_EXP

  View on GitHub
  Tomcat PUT方法任意文件写入（CVE-2017-12615）exp
  ☆11Mar 14, 2023Updated 3 years ago
• 0x7556 / wolfshell

  View on GitHub
  幽狼AI Shell：首款支持AI渗透的高级WebShell & C2管理工具，内置WebShell MCP服务器，支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，Shell…
  ☆276Aug 16, 2026Updated last month
• meigui637 / iotsec_tools

  View on GitHub
  ☆18Jul 21, 2025Updated last year
• Simple, predictable pricing with DigitalOcean hosting • Ad
  Always know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
• threehammers-group / SwordfishSuite

  View on GitHub
  SwordfishSuite - Web安全测试利器 一款轻量、高速、插件化的现代Web安全测试工具，专为安全研究员和渗透测试者打造。 ✨ 核心特性： 智能代理：无缝拦截与修改HTTP/S请求，流畅度超越BurpSuite。 高度集成：集成云端虚拟手机，快速定位AP…
  ☆91Apr 10, 2026Updated 5 months ago
• duckpigdog / XSS-Sec

  View on GitHub
  本项目是一个以“实战为导向”的 XSS 漏洞练习靶场，覆盖反射型、存储型、DOM 型、SVG、CSP、框架注入、协议绕过等多种场景。页面样式统一，逻辑清晰，适合系统化学习与教学演示
  ☆42Mar 6, 2026Updated 7 months ago
• s1null / Sharpmssqluser

  View on GitHub
  C#快速添加删除mssql用户小工具
  ☆21Aug 30, 2025Updated last year
• zhaoyumi / MYExploit

  View on GitHub
  二开了MYExploit项目，其实也没改多少，就是新增了一些POC。
  ☆15Jan 10, 2024Updated 2 years ago
• Hagrid29 / BOF-RemoteRegSave

  View on GitHub
  Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer
  ☆18Mar 4, 2023Updated 3 years ago
• gh0stNinja / ProxySwitcher

  View on GitHub
  这是一个结合 Burp Suite 扩展插件 和 ProxyPool 爬虫代理 IP 池 的集成方案，用于自动化获取、验证和管理免费代理，实现高效的 HTTP 代理切换。插件支持直接粘贴代理列表或访问 ProxyPool API URL 获取代理，支持 HTTP 和 SOC…
  ☆34Oct 30, 2025Updated 11 months ago
• tyB-or / matu7

  View on GitHub
  Matu7 渗透测试工具箱-(不含工具)
  ☆18Apr 20, 2026Updated 5 months ago
• DeEpinGh0st / JDumpSpiderGUI

  View on GitHub
  JDumpSpiderGUI 是一个用于 Java 堆转储文件分析的工具，支持命令行和 JavaFX 图形界面两种模式。该工具主要是在原工具上添加了图形化的界面
  ☆180May 5, 2025Updated last year
• ChinaRan0 / Attack_login

  View on GitHub
  适用于红队攻防演练获得目标账户批量登录，报告编写
  ☆103Nov 18, 2025Updated 10 months ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• wafinfo / MeterSphere-plugin-Backdoor

  View on GitHub
  支持注入内存马和Bypass WAF
  ☆28Dec 12, 2023Updated 2 years ago
• TryA9ain / RDP_Credential

  View on GitHub
  抓取主机保存的RDP凭据
  ☆17Dec 26, 2020Updated 5 years ago
• ZFYy1x / auth_analyzer_modify

  View on GitHub
  burp越权测试插件
  ☆21Sep 3, 2026Updated last month
• yutianqaq / CSx4Ldr

  View on GitHub
  Cobalt Strike plugin
  ☆53Mar 29, 2024Updated 2 years ago
• nu0l / Send_Email

  View on GitHub
  一款轻量化可定制模板的邮件批量发送工具 | 可用于攻防钓鱼或其他邮件个性化的场景 | 可启动JavaFX或SpringWeb环境
  ☆48Apr 2, 2026Updated 6 months ago
• mhtsec / kali-mht

  View on GitHub
  增加了几十个常用工具的kali
  ☆48Dec 27, 2024Updated last year
• Chave0v0 / VulnDemo

  View on GitHub
  集成 heapdump + shiro + fastjson + log4j2 漏洞环境
  ☆13Apr 29, 2025Updated last year