无回显漏洞测试辅助平台,平台使用Java编写,提供DNSLOG,HTTPLOG等功能,辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。
☆403Dec 21, 2025Updated 5 months ago
Alternatives and similar repositories for Bridge
Users that are interested in Bridge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability☆468Updated this week
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。☆460Aug 20, 2025Updated 9 months ago
- DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具,自带WEB界面 / DNSLog-GO is a monitoring tool written in Golang that monitors DNS resolution records. It …☆1,286Jan 21, 2026Updated 4 months ago
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具☆2,018May 21, 2024Updated 2 years ago
- Hyuga is a tool for monitoring Out-of-Band (OOB) traffic, supporting DNS, HTTP, LDAP, RMI, and DNS-Rebinding。🪤☆540Dec 27, 2025Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆272Mar 4, 2022Updated 4 years ago
- Java RCE 回显测试代码☆1,013Oct 15, 2020Updated 5 years ago
- Burp被动扫描流量转发插件☆1,463Jun 17, 2024Updated last year
- JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本☆259Oct 29, 2021Updated 4 years ago
- Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)☆1,403Dec 16, 2022Updated 3 years ago
- domain_hunter的高级版本,SRC挖洞、HW打点之必备!自动化资产收集;快速Title获取;外部工具联动;等等☆2,136Updated this week
- ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。☆1,647Jun 16, 2024Updated last year
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆775Jan 26, 2022Updated 4 years ago
- Shiro反序列化利用工具,支持新版本(AES-GCM)Shiro的key爆破,配合ysoserial,生成回显Payload☆891May 28, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 傻瓜式漏洞PoC测试框架☆1,442Oct 30, 2023Updated 2 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持☆962Jun 16, 2024Updated last year
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞,一键注册蚁剑filter内存shell☆532Aug 25, 2020Updated 5 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,402Jan 18, 2022Updated 4 years ago
- Bypass firewall for traffic forwarding using webshell☆1,431Sep 29, 2021Updated 4 years ago
- Shiro反序列化回显利用、内存shell、检查 Burp插件☆216Sep 1, 2022Updated 3 years ago
- CobaltStrike后渗透测试插件☆1,563Oct 28, 2021Updated 4 years ago
- 通过 Redis 主从写出无损文件☆717May 25, 2020Updated 6 years ago
- 边界打点后的自动化渗透工具☆1,890Jul 19, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cola Dnslog v1.3.2 更加强大的dnslog平台/无回显漏洞探测辅助平台 完全开源 dnslog httplog ldaplog rmilog 支持dns http ldap rmi等协议 提供API调用方式便于与其他工具结合 支持钉钉机器人、Bark等提醒…☆502Feb 6, 2023Updated 3 years ago
- java内存对象搜索辅助工具☆820Sep 23, 2022Updated 3 years ago
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆714May 10, 2021Updated 5 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现,集合了mock、httplog、dns tools、xss,可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- 主流供应商的一些攻击性漏洞汇总☆803Nov 8, 2021Updated 4 years ago
- myscan 被动扫描☆662Mar 19, 2021Updated 5 years ago
- Shiro550/Shiro721 一键化利用工具,支持多种回显方式☆1,958Jun 4, 2021Updated 5 years ago
- A helpful Java Deserialization exploit framework.☆1,240Feb 17, 2025Updated last year
- GoScan是采用Golang语言编写的一款分布式综合资产管理系统,适合红队、SRC等使用☆714May 6, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 高危漏洞精准检测与深度利用框架☆1,463Jan 8, 2023Updated 3 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize☆1,372Nov 18, 2021Updated 4 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞, 对功能进行强化以及脚本进行分类添加,自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆357Mar 12, 2020Updated 6 years ago
- DNSLOG平台 golang☆441Dec 30, 2021Updated 4 years ago
- 一个LDAP请求监听器,摆脱dnslog平台☆291Apr 7, 2023Updated 3 years ago
- 这是一个用于IP和域名碰撞匹配访问的小工具,旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。☆1,193Apr 30, 2019Updated 7 years ago