SecNN/SecNN-Wiki external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

SecNN/SecNN-Wiki

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/SecNN/SecNN-Wiki)

Close

SecNN / SecNN-WikiView on GitHubMore

• External links
• Readme badge

Wiki漏洞库管理系统&网络安全知识库-渗透测试常见漏洞知识库文档-该网站收集了Web应用层漏洞、中间件安全缺陷、系统配置不当、移动端（Android）安全问题、权限提升、RCE、网络设备及IOT安全。

☆89Oct 23, 2025Updated last year

Alternatives and similar repositories for SecNN-Wiki

Users that are interested in SecNN-Wiki are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• w-sega / Burp_URLReplayer

  View on GitHub
  URLReplayer是一个burp插件，一个用于自动化 API 接口提取、参数解析及批量验证 的 Burp Suite 插件。旨在从 HTTP 响应中快速挖掘未公开的 API 端点并进行有效性测试。
  ☆44Jan 15, 2026Updated 9 months ago
• phpcalm / exceed

  View on GitHub
  一个功能强大的浏览器扩展程序，专门用于检测Web系统中的权限越权漏洞，适用于Web渗透测试。
  ☆45Oct 11, 2025Updated last year
• BugFor-Pings / DLV

  View on GitHub
  聚合漏洞情报平台-最新漏洞存储库,每日最新漏洞情报预览,每日漏洞情报预警，Daily latest vulnerability intelligence sharing and early warning platform
  ☆18Nov 6, 2025Updated 11 months ago
• TD0U / FingerScan

  View on GitHub
  BurpSuite 被动指纹识别 / Favicon Hash / 递归目录扫描 / 路径收集 一体化插件
  ☆41Aug 7, 2026Updated 2 months ago
• ther0ok1eboy / CaptchaDos

  View on GitHub
  Burpsuite验证码DOS攻击插件。
  ☆21Oct 24, 2024Updated 2 years ago
• Proton VPN Special Offer - Get 70% off • Ad
  Special partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
• h0ny / NacosExploit

  View on GitHub
  Nacos 综合漏洞利用工具
  ☆694Sep 8, 2026Updated last month
• Msup5 / JeecgGo

  View on GitHub
  JeecgBoot Go版本综合漏洞检测工具
  ☆105Feb 24, 2026Updated 8 months ago
• duckpigdog / Vue-Sec

  View on GitHub
  Vue 安全漏洞及 JS 逆向反调试练习靶场
  ☆13Jan 18, 2026Updated 9 months ago
• JaveleyQAQ / SQL-Injection-Scout

  View on GitHub
  SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。
  ☆280Feb 6, 2026Updated 8 months ago
• yqcs / fingerscan

  View on GitHub
  nmap library for go developers，端口指纹识别库，能完整识别端口服务、应用组件版本及网站指纹
  ☆37May 5, 2026Updated 5 months ago
• youmulijiang / BpArsenal

  View on GitHub
  BpArsenal, a Burp Suite plugin that can quickly convert http requests into command-line tool execution, launch third-party tools and open…
  ☆21Oct 31, 2025Updated last year
• AzureHaze8 / IR-KnowledgeSummary

  View on GitHub
  个人应急响应知识库，整理学习资料、个人思考、PPT、工具集合、应急命令行表格等
  ☆13Dec 6, 2025Updated 10 months ago
• darkfiv / DouSql

  View on GitHub
  ☆269Mar 31, 2026Updated 7 months ago
• wy876 / SecAlerts

  View on GitHub
  微信公众号安全漏洞文章链接聚合
  ☆40Updated this week
• Simple, predictable pricing with DigitalOcean hosting • Ad
  Always know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
• SecNN / Xeno-RAT-Server

  View on GitHub
  Xeno RAT Server 中文汉化版 Xeno-RAT 是用 C# 开发的开源远程访问工具 （RAT），为远程系统管理提供了一套全面的功能。具有 HVNC、实时麦克风、反向代理等功能！适用于安全研究和渗透测试， 使用者必须严格遵守合规要求，禁止用于非法用途。远控|R…
  ☆19Oct 24, 2025Updated last year
• ph0ebus / Hae2Yakit

  View on GitHub
  用于转换BurpSuite上无敌的Hae信息收集插件的配置规则为yakit使用
  ☆18Apr 16, 2025Updated last year
• Bohemiana / godzilla_erkai

  View on GitHub
  ☆139Feb 8, 2025Updated last year
• szjr123 / JiusiOAExploitTool

  View on GitHub
  九思OA漏洞集合检测工具
  ☆16Oct 15, 2025Updated last year
• Revcloudi / Rinte

  View on GitHub
  Rinte是一款专为渗透测试人员设计的 BurpSuite 插件，提供强大的框架自动化安全扫描功能。目前支持1000+POC
  ☆79Aug 13, 2026Updated 2 months ago
• T3nk0 / Upload_Auto_Fuzz

  View on GitHub
  一个用于测试文件上传功能安全性的 Burp Suite 插件。通过 Intruder 模块自动生成各类绕过 payload，覆盖常见的文件上传限制场景。共1000+条payload
  ☆630Dec 24, 2025Updated 10 months ago
• eeeeeeeeee-code / POC

  View on GitHub
  备份的漏洞库，3月开始我们来维护
  ☆2,259Oct 20, 2026Updated last week
• chasingboy / dirsx

  View on GitHub
  dirsx 是一款能够自动化过滤扫描结果的目录扫描工具
  ☆367Mar 12, 2026Updated 7 months ago
• hookdd / OssScan

  View on GitHub
  burp插件,Oss漏洞被动扫描
  ☆118Aug 8, 2025Updated last year
• Open source password manager - Proton Pass • Ad
  Securely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
• EastSword / skill-dfyx_code_security_review

  View on GitHub
  东方隐侠团队出品，代码审计skill
  ☆145Feb 25, 2026Updated 8 months ago
• alanni-tom / Turacos

  View on GitHub
  Turacos 是一款专业的多数据库安全评估工具，支持 PostgreSQL、MySQL、Redis、MSSQL 等多种数据库的后渗透操作。 为安全研究人员提供系统化、模块化的数据库安全测试能力，助力企业进行安全评估与漏洞验证。
  ☆82Oct 14, 2026Updated 2 weeks ago
• Lotus6 / JavaGadgetGenerator

  View on GitHub
  JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...
  ☆573Sep 12, 2026Updated last month
• pureqh / xxl-job-attack

  View on GitHub
  xxl-job漏洞综合利用工具
  ☆159Jun 3, 2025Updated last year
• taielab / ClearFeather

  View on GitHub
  清羽(ClearFeather)是一款专为网络安全攻防演练设计的资产智能清洗与分类工具。它能够自动化处理攻防演练中的各类资产数据，包括IP、域名、URL等，通过结合DeepSeek API的大语言模型能力和精准的正则表达式处理，实现资产的高效识别、分类与整理。
  ☆25May 29, 2025Updated last year
• perlh / Wavely

  View on GitHub
  Nuclei POC 管理与漏洞验证工具-Nuclei GUI
  ☆544Apr 24, 2026Updated 6 months ago
• Ad1euDa1e / VueCrack

  View on GitHub
  红队浏览器插件-检测VUE站点未授权漏洞
  ☆947May 7, 2026Updated 5 months ago
• DeEpinGh0st / JDumpSpiderGUI

  View on GitHub
  JDumpSpiderGUI 是一个用于 Java 堆转储文件分析的工具，支持命令行和 JavaFX 图形界面两种模式。该工具主要是在原工具上添加了图形化的界面
  ☆182May 5, 2025Updated last year
• Moyuyjs / moyulab

  View on GitHub
  欢迎各位关注我们的公众号：摸鱼冲浪研究所
  ☆43Nov 14, 2025Updated 11 months ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• DemonRR / AI-NetGuard

  View on GitHub
  基于DeepSeek等AI模型，实现智能代码审计、Webshell检测及流量分析研判，助力高效网络安全威胁识别与处置。
  ☆57Oct 13, 2025Updated last year
• xhmcc / ehole_finger

  View on GitHub
  ehole超大指纹
  ☆34Jul 25, 2025Updated last year
• SharpKean / Burp_TLA

  View on GitHub
  Burp插件 TLA Watcher：分为两个模块：流量管理模块、扩展功能模块（脆弱风险检测）
  ☆39Nov 13, 2025Updated 11 months ago
• winezer0 / XiaYue_Pro

  View on GitHub
  Xia_Yue_Plus 瞎越 增强版
  ☆75Aug 20, 2025Updated last year
• darkfiv / PromptInjectionScanner

  View on GitHub
  ☆133Dec 8, 2025Updated 10 months ago
• Zcentury / Venom

  View on GitHub
  致命精准的红队作战兵器。模块化集成资产发现、漏扫与利用，重新定义渗透测试工作流 (Workflow) 的新一代安全平台。
  ☆409Jun 29, 2026Updated 4 months ago
• eeeeeeeeee-code / e0e1-config

  View on GitHub
  综合后渗透方面的杂烩
  ☆602Mar 1, 2026Updated 7 months ago