Docker容器逃逸工具（Docker Escape Tools）
☆279Dec 15, 2022Updated 3 years ago
Alternatives and similar repositories for shovel
Users that are interested in shovel are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- One-click injection into the SSHD process to record and send the password for ssh login☆426Mar 12, 2024Updated 2 years ago
- Mssql利用工具☆277Aug 7, 2023Updated 2 years ago
- JavaPassDump☆273Jan 7, 2022Updated 4 years ago
- K8S安全攻防思维导图 | Docker安全攻防思维导图☆417Jun 22, 2022Updated 3 years ago
- 域内自动化信息搜集利用工具☆468Oct 24, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,470Apr 25, 2024Updated last year
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 2 years ago
- 帆软/致远密码解密工具☆359Jul 29, 2021Updated 4 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆772Jan 26, 2022Updated 4 years ago
- 域控安全one for all☆736Sep 9, 2024Updated last year
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆462Jan 12, 2025Updated last year
- 六大云存储，泄露利用检测工具☆1,245Mar 28, 2025Updated 11 months ago
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 获取服务器或域控登录日志☆276Sep 8, 2023Updated 2 years ago
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,050Oct 7, 2022Updated 3 years ago
- 提取域控日志，支持远程提取☆171Mar 17, 2025Updated last year
- FinalShellGetPass是一款FinalShell密码读取工具☆103Nov 27, 2022Updated 3 years ago
- Java web路由内存分析工具☆438May 22, 2025Updated 10 months ago
- 各种数据库的利用姿势☆1,033Jan 3, 2025Updated last year
- 创建隐藏计划任务，权限维持，Bypass AV☆559Sep 1, 2021Updated 4 years ago
- C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录，从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机☆431Jan 28, 2021Updated 5 years ago
- 替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆150Mar 13, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- dump lsass进程工具☆561Jul 20, 2023Updated 2 years ago
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案☆277Jan 10, 2023Updated 3 years ago
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 2 years ago
- SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。☆964Aug 5, 2021Updated 4 years ago
- Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小☆66Jul 4, 2024Updated last year
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- 可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。☆264Nov 25, 2022Updated 3 years ago
- 一款dump hash工具配合后渗透的利用☆275Apr 21, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 收集内存马打入方式☆507May 20, 2022Updated 3 years ago
- 域信息收集工具☆412Sep 16, 2022Updated 3 years ago
- OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。☆676Dec 30, 2022Updated 3 years ago
- 一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.☆2,166Aug 21, 2025Updated 7 months ago
- 命令执行不回显但DNS协 议出网的命令回显场景解决方案（修改为使用ceye接收请求，添加自定义DNS服务器）☆293Aug 20, 2023Updated 2 years ago
- Shiro文件上传工具☆102Jun 28, 2023Updated 2 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,014May 21, 2024Updated last year