OA-HUNTER/TongDa-OA external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

OA-HUNTER/TongDa-OA

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/OA-HUNTER/TongDa-OA)

Close

OA-HUNTER / TongDa-OAView on GitHubMore

• External links
• Readme badge

通达OA一些漏洞点

☆160Aug 20, 2020Updated 6 years ago

Alternatives and similar repositories for TongDa-OA

Users that are interested in TongDa-OA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆448Jun 19, 2024Updated 2 years ago
• DVPNET / Report_Public

  View on GitHub
  DVPNET 公开漏洞知识库
  ☆92Jun 10, 2021Updated 5 years ago
• Rvn0xsy / goDomain

  View on GitHub
  Windows活动目录中的LDAP信息收集工具
  ☆234Oct 9, 2021Updated 4 years ago
• zilong3033 / fastjsonScan

  View on GitHub
  fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。
  ☆125May 14, 2021Updated 5 years ago
• Wd0g / Gos

  View on GitHub
  专为蚁剑编写的独立WebShell服务程序
  ☆10Jan 31, 2025Updated last year
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• woodpecker-appstore / weblogic-infodetector

  View on GitHub
  woodpecker框架weblogic信息探测插件
  ☆186Mar 23, 2022Updated 4 years ago
• NS-Sp4ce / MoAn_Honey_Pot_Urls

  View on GitHub
  X安蜜罐用的一些存在JSonp劫持的API
  ☆91May 28, 2021Updated 5 years ago
• xinyu2428 / TDOA_RCE

  View on GitHub
  通达OA综合利用工具
  ☆521Mar 17, 2021Updated 5 years ago
• thunderbarca / Caesar

  View on GitHub
  一个全新的敏感文件发现工具
  ☆224Jan 10, 2021Updated 5 years ago
• An0nySec / ShadowUser

  View on GitHub
  影子用户 克隆
  ☆231Dec 30, 2021Updated 4 years ago
• wafinfo / Sunflower_get_Password

  View on GitHub
  一款针对向日葵的识别码和验证码提取工具
  ☆926Nov 1, 2021Updated 4 years ago
• dr0op / CrossNet-Beta

  View on GitHub
  红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。
  ☆369Jun 19, 2024Updated 2 years ago
• uknowsec / SharpToolsAggressor

  View on GitHub
  内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~
  ☆501Feb 13, 2020Updated 6 years ago
• z1un / TongdaOA-exp

  View on GitHub
  TongdaOA 11.7 ~11.8 通达OA，任意用户登录+后台getshell
  ☆86Jul 16, 2021Updated 5 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• M-Kings / BypassAv-web

  View on GitHub
  nim一键免杀
  ☆216Mar 8, 2021Updated 5 years ago
• lengjibo / NetUser

  View on GitHub
  使用windows api添加用户，可用于net无法使用时.分为nim版，c++版本，RDI版，BOF版。
  ☆419Sep 29, 2021Updated 4 years ago
• Daybr4ak / C2ReverseProxy

  View on GitHub
  一款可以在不出网的环境下进行反向代理及cs上线的工具
  ☆494Apr 26, 2023Updated 3 years ago
• Hzllaga / BT_Panel_Privilege_Escalation

  View on GitHub
  宝塔面板Windows版提权方法
  ☆322Jan 26, 2021Updated 5 years ago
• sf197 / GetPwd

  View on GitHub
  用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密
  ☆250Aug 26, 2020Updated 6 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆272Mar 4, 2022Updated 4 years ago
• Rvn0xsy / PassDecode-jar

  View on GitHub
  帆软/致远密码解密工具
  ☆363Jul 29, 2021Updated 5 years ago
• sukabuliet / ThinkphpRCE

  View on GitHub
  Thinkphp rce扫描脚本，附带日志扫描
  ☆241Jun 19, 2020Updated 6 years ago
• ShiHuang-ESec / EHole

  View on GitHub
  EHole(棱洞)-红队重点攻击系统指纹探测工具
  ☆468Jan 27, 2021Updated 5 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• jiangsir404 / POC-S

  View on GitHub
  POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC
  ☆355Mar 12, 2020Updated 6 years ago
• Heart-Sky / ListRDPConnections

  View on GitHub
  C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录，从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机
  ☆431Jan 28, 2021Updated 5 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆442Mar 23, 2026Updated 5 months ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,398Jan 18, 2022Updated 4 years ago
• hhxy / e-message_exp

  View on GitHub
  e-mesaage <=4.15 后台jar包上传exp
  ☆47Mar 15, 2019Updated 7 years ago
• NS-Sp4ce / TongDaOA-Fake-User

  View on GitHub
  通达OA 任意用户登录漏洞
  ☆358Aug 27, 2020Updated 6 years ago
• 0x727 / ShuiYing_0x727

  View on GitHub
  检测域环境内，域机器的本地管理组成员是否存在弱口令和通用口令，对域用户的权限分配以及域内委派查询
  ☆357Aug 10, 2021Updated 5 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆759Apr 14, 2021Updated 5 years ago
• Adminisme / SharpRDPLog

  View on GitHub
  Windows rdp相关的登录记录导出工具，可用于后渗透中Windows服务器的信息收集阶段。输出内容包括：本地rdp端口、mstsc缓存、cmdkey缓存、登录成功、失败日志事件。
  ☆285Jun 23, 2024Updated 2 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,021May 21, 2024Updated 2 years ago
• shack2 / skyscorpion

  View on GitHub
  新版将不再对外公开发布。天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端，支持跨平台运行，目前基于JDK1.8开发，运行必须安装JDK或JRE 1.8，注意不能是open jdk，只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebSh…
  ☆385Mar 22, 2021Updated 5 years ago
• mstxq17 / AssetExploer

  View on GitHub
  以子域名作为基础数据进行分析出关键词，然后基于FoFa、Shodan、Zoomye网络引擎的多维度资产探测脚本
  ☆21Apr 25, 2021Updated 5 years ago
• Ares-X / shiro-exploit

  View on GitHub
  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
  ☆892May 28, 2021Updated 5 years ago
• Liqunkit / LiqunShield

  View on GitHub
  下架
  ☆140Jan 21, 2022Updated 4 years ago
• grayddq / EBurst

  View on GitHub
  这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。
  ☆344May 22, 2023Updated 3 years ago
• LFYSec / ActuatorExploit

  View on GitHub
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆231Dec 5, 2020Updated 5 years ago