PHP代码审计学习
☆31Oct 13, 2021Updated 5 years ago
Alternatives and similar repositories for PHP_CodeAudit
Users that are interested in PHP_CodeAudit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- Jetty&JDK 均为高版本下的内存马注入☆17Sep 3, 2025Updated last year
- ☆28Feb 2, 2024Updated 2 years ago
- 《PHP代码审计入门指南》 这本指南包含了我在学习PHP代码审计过程中整理出的一些技巧和对漏洞的一些理解☆351Apr 8, 2022Updated 4 years ago
- 通过ThinkPHP框架学习PHP代码审计☆295Jun 19, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Burp Suite extension for parsing Swagger web service definition files☆20Jul 15, 2025Updated last year
- 主要用于隐藏进程真实路径，进程带windows真签名☆117Oct 15, 2024Updated 2 years ago
- 基于 CVE-2025-55182 漏洞检测 burpsuite 被动扫描插件☆12Dec 5, 2025Updated 10 months ago
- CVE-2023-22515☆51Nov 10, 2023Updated 2 years ago
- 参考国外巨佬思路，自己写一个为渗透测试初始化ubuntu虚拟机的bash脚本☆16Oct 13, 2025Updated last year
- 基于ldap添加ApplicationImpersonation权限☆10Mar 4, 2025Updated last year
- Hessian UTF-8 Overlong Encoding☆21Mar 9, 2024Updated 2 years ago
- 在原版nps的基础上，增加了nps探测，以及对应的利用方式（如获取cookie，页面等），进行一些简单的二开。未经过大量测试，可能存在bug。☆22Aug 5, 2025Updated last year
- 通过OXID解析器获取Windows远程主机上网卡地址☆25Aug 8, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 从cs4.2反编译后提取的web端键盘记录，记录web页面输入的所有文本内容。☆12Aug 16, 2021Updated 5 years ago
- 关于信息收集的一些记录☆131Mar 8, 2021Updated 5 years ago
- 记录ssh或sudo明文密码☆43Aug 8, 2022Updated 4 years ago
- 一款host碰撞工具，做了较多的误报优化☆198Jun 15, 2024Updated 2 years ago
- Burpsuite插件：被动进行未授权访问或越权操作的扫描☆20Aug 28, 2021Updated 5 years ago
- 红帆ioffice密码解密工具☆11Sep 11, 2022Updated 4 years ago
- .Net 反序列化漏洞学习☆15Aug 29, 2020Updated 6 years ago
- 火刃 - 轻量级的，多功能的，联合xray、物联网引擎的全自动广域队列扫描器☆28Mar 7, 2022Updated 4 years ago
- Basic Psexec clone, but in golang.☆17Jul 2, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Apache Shiro payload AES解密☆28Mar 11, 2021Updated 5 years ago
- 一个提供查询 TXT 记录的 DNS 服务利用工具。例如：可配合 Windows 下的 certutil 工具传输小文件（64KB）☆36Dec 31, 2021Updated 4 years ago
- ☆10Jul 5, 2020Updated 6 years ago
- cve-2020-1472 复现利用及其exp☆113Sep 16, 2020Updated 6 years ago
- Java Agent memory horse scanner combined with Call Graph modus☆65Dec 26, 2022Updated 3 years ago
- CVE-2022-39197 RCE POC☆13Oct 22, 2022Updated 4 years ago
- 备份文件扫描，并自动进行下载☆128Jul 26, 2023Updated 3 years ago
- 分割小工具，可分割木马，一键生成写入、合并、追加命令☆162Jan 5, 2024Updated 2 years ago
- Golang implement winrm client with pass the hash☆33Apr 29, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Metarget技术交流群分享内容定期存档☆12Oct 22, 2021Updated 5 years ago
- JeecgCracker 是一个专门针对 JeecgBoot 框架的密码爆破工具。☆28Oct 29, 2024Updated 2 years ago
- 通过Whois信息发现更多与目标有关联的域名，扩大攻击面☆14Mar 9, 2022Updated 4 years ago
- CVE-2025-54424：1Panel 客户端证书绕过RCE漏洞 一体化工具 (扫描+利用)☆58Aug 5, 2025Updated last year
- Visual Studio .suo文件反序列化漏洞利用工具☆17Jun 28, 2025Updated last year
- 某软最新公开gadgegt,新加入不出网利用。☆89Sep 6, 2024Updated 2 years ago
- 用于替代Server酱的产物,持续更新维护,内置常用语言SDK,让您轻松使用。可直接订阅CVE监控、安全文章推送功能。☆29Oct 7, 2023Updated 3 years ago