Python2编写的struts2漏洞全版本检测和利用工具
☆1,419May 7, 2019Updated 6 years ago
Alternatives and similar repositories for struts-scan
Users that are interested in struts-scan are comparing it to the libraries listed below
Sorting:
- Python3编写的CMS漏洞检测框架☆1,454May 22, 2023Updated 2 years ago
- Weblogic一键漏洞检测工具，V1.5，更新时间：20200730☆2,265May 22, 2023Updated 2 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持☆968Jun 16, 2024Updated last year
- 快速搭建各种漏洞环境(Various vulnerability environment)☆3,785Oct 27, 2020Updated 5 years ago
- Struts2全漏洞扫描利用工具☆2,211Jul 12, 2021Updated 4 years ago
- 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework☆1,953Mar 28, 2022Updated 3 years ago
- 各种漏洞poc、Exp的收集或编写☆2,485Jun 24, 2025Updated 8 months ago
- 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测☆567Dec 1, 2017Updated 8 years ago
- CMS漏洞测试用例集合☆1,763Dec 20, 2018Updated 7 years ago
- Burp suite 分块传输辅助插件☆2,022Feb 23, 2022Updated 4 years ago
- 巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。☆3,596Apr 16, 2024Updated last year
- 免杀webshell无限生成工具☆1,288Apr 3, 2020Updated 5 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,198Oct 17, 2023Updated 2 years ago
- 从零开始内网渗透学习☆3,010Apr 8, 2016Updated 9 years ago
- DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。☆1,436Nov 14, 2018Updated 7 years ago
- 绕过专业工具检测的Webshell研究文章和免杀的Webshell☆1,733Nov 15, 2020Updated 5 years ago
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,389Dec 16, 2022Updated 3 years ago
- A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers☆2,368Dec 31, 2024Updated last year
- A fast sub domain brute tool for pentesters☆3,603Sep 15, 2022Updated 3 years ago
- Source Code Security Audit (源代码安全审计)☆3,186Sep 16, 2022Updated 3 years ago
- Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…☆4,273Apr 4, 2021Updated 4 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆728Mar 21, 2022Updated 3 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- ☆743Nov 20, 2019Updated 6 years ago
- Shiro550/Shiro721 一键化利用工具，支持多种回显方式☆1,950Jun 4, 2021Updated 4 years ago
- Redis 4.x/5.x RCE☆975Nov 30, 2021Updated 4 years ago
- GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)☆2,037May 21, 2022Updated 3 years ago
- 上传漏洞fuzz字典生成脚本☆1,270Apr 1, 2021Updated 4 years ago
- Enumeration sub domains(枚举子域名)☆1,066Dec 1, 2021Updated 4 years ago
- K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…☆6,154Jan 25, 2025Updated last year
- “冰蝎”动态二进制加密网站管理客户端☆6,134Aug 24, 2023Updated 2 years ago
- CVE-2019-2725 命令回显☆436May 8, 2023Updated 2 years ago
- An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工…☆3,358Oct 21, 2025Updated 4 months ago
- Cobalt Strike系列☆2,413Dec 3, 2023Updated 2 years ago
- 🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)☆1,343Dec 8, 2022Updated 3 years ago
- 动态多线程敏感信息泄露检测工具☆1,142Dec 17, 2016Updated 9 years ago
- WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。☆2,105Jun 22, 2020Updated 5 years ago
- The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.☆3,152Mar 6, 2025Updated 11 months ago