SummerSec/BlogPapers external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

SummerSec/BlogPapers

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/SummerSec/BlogPapers)

Close

SummerSec / BlogPapersView on GitHubMore

• External links
• Readme badge

<a href="sumsec.me"><img src="https://readme-typing-svg.demolab.com?font=Fira+Code&size=24&pause=1000&color=FDFDFD&background=13797800&center=true&vCenter=true&width=435&lines=%F0%9F%91%8B%EF%BC%8C%E5%83%8F%E6%B8%85%E6%B0%B4%E4%B8%80%E8%88%AC%E6%B8%85%E6%BE%88%E9%80%8F%E6%98%8E" alt="SummerSec" /></a>

☆54Updated this week

Alternatives and similar repositories for BlogPapers

Users that are interested in BlogPapers are comparing it to the libraries listed below

• SummerSec / WebToolsCollections

  View on GitHub
  🐛糊涂虫工具箱 About The Project https://sumsec.me/2022/Hack-Tools2Web.html
  ☆49Jun 12, 2022Updated 3 years ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• achuna33 / FuckMemshell

  View on GitHub
  内存马持久化
  ☆59May 19, 2022Updated 3 years ago
• SummerSec / SPATool

  View on GitHub
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆132Jul 12, 2023Updated 2 years ago
• SummerSec / SpringExploit

  View on GitHub
  🚀 一款为了学习go而诞生的漏洞利用工具
  ☆450Jun 14, 2022Updated 3 years ago
• SummerSec / Loader

  View on GitHub
  动态链接库加载工具
  ☆20Jan 26, 2022Updated 4 years ago
• v1ncilazy / BypassAddUser

  View on GitHub
  调用Windows Api，绕过杀软添加用户
  ☆36Oct 8, 2020Updated 5 years ago
• yhy0 / nucleiTest

  View on GitHub
  集成 nuclei 示例
  ☆14Nov 30, 2021Updated 4 years ago
• BrucessKING / CVE-2021-36749

  View on GitHub
  Apache Druid 任意文件读取
  ☆33Oct 15, 2021Updated 4 years ago
• achuna33 / MYJNDIExploit

  View on GitHub
  自己的JNDI 利用工具，添加一些人性化功能
  ☆131Sep 4, 2022Updated 3 years ago
• ssrsec / SpringBootEnvDecrypt

  View on GitHub
  SpringBoot获取被星号脱敏的密码的明文
  ☆57Dec 13, 2021Updated 4 years ago
• sf197 / GetPwd

  View on GitHub
  用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密
  ☆251Aug 26, 2020Updated 5 years ago
• Roboterh / study_summary

  View on GitHub
  study_summary
  ☆10Aug 8, 2022Updated 3 years ago
• Firebasky / LdapBypassJndi

  View on GitHub
  The function of the tool is to inject JNDI through LDAP
  ☆28Dec 21, 2021Updated 4 years ago
• SummerSec / BypassSuper

  View on GitHub
  Bypass 403 or 401 or 404
  ☆101Feb 8, 2021Updated 5 years ago
• Phuong39 / Ortau

  View on GitHub
  一个用于隐藏C2的、开箱即用的反向代理服务器。 旨在省去繁琐的配置Nginx服务的过程。
  ☆45Dec 18, 2021Updated 4 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆254Jul 12, 2023Updated 2 years ago
• SummerSec / JavaLearnVulnerability

  View on GitHub
  Java漏洞学习笔记 Deserialization Vulnerability
  ☆945Jun 14, 2023Updated 2 years ago
• Syst2m / FunnyMeterpreter

  View on GitHub
  与反病毒软件老大哥们的打闹日常
  ☆13Nov 8, 2018Updated 7 years ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆438Sep 10, 2021Updated 4 years ago
• EXP-Docs / CVE-2021-22192

  View on GitHub
  CVE-2021-22192 靶场： 未授权用户 RCE 漏洞
  ☆36Jan 24, 2023Updated 3 years ago
• fairyming / CVE-2020-1938

  View on GitHub
  在一定条件下可执行命令
  ☆11Feb 21, 2020Updated 6 years ago
• canc3s / cIPR

  View on GitHub
  将域名转为ip段权重
  ☆215Mar 14, 2023Updated 2 years ago
• SummerSec / BurpBountyProfiles

  View on GitHub
  BurpBounty插件的配置文件收集项目
  ☆144Feb 8, 2021Updated 5 years ago
• flowerwind / JspFinder

  View on GitHub
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆176Jan 4, 2022Updated 4 years ago
• lz2y / yaml-payload-for-ruoyi

  View on GitHub
  A memory shell for ruoyi
  ☆266Apr 28, 2023Updated 2 years ago
• r00tSe7en / JNDIMonitor

  View on GitHub
  一个LDAP请求监听器，摆脱dnslog平台
  ☆293Apr 7, 2023Updated 2 years ago
• woodpecker-appstore / weblogic-infodetector

  View on GitHub
  woodpecker框架weblogic信息探测插件
  ☆185Mar 23, 2022Updated 3 years ago
• achuna33 / Memoryshell-JavaALL

  View on GitHub
  收集内存马打入方式
  ☆506May 20, 2022Updated 3 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆770Jan 26, 2022Updated 4 years ago
• xiecat / prad

  View on GitHub
  Web directory and file discovery.
  ☆18Oct 31, 2022Updated 3 years ago
• lazaars / MailSniper

  View on GitHub
  MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, i…
  ☆13Nov 4, 2018Updated 7 years ago
• thelostworldFree / Aazhen-v3.1

  View on GitHub
  自研JavaFX图形化漏洞扫描工具，支持ThinkPHP 2.x RCE，Thinkphp5 5.0.22/5.1.29RCE，ThinkPHP5 5.0.23RCE和ThinkPHP5 SQL注入漏洞和敏感信息泄露漏洞的漏洞检测，以及命令执行的功能。漏洞POC基本适用Th…
  ☆16May 19, 2022Updated 3 years ago
• 0x727 / DropLabTools

  View on GitHub
  一个垃圾利用工具，半自动发包机器
  ☆228Sep 8, 2022Updated 3 years ago
• binganao / TaiO

  View on GitHub
  TaiO 的定位是一款用于攻击方对靶标资产梳理，快速定位脆弱资产的网络空间测绘工具
  ☆75Mar 9, 2022Updated 3 years ago
• safesword / WebExp

  View on GitHub
  2020年~2021年 网站CMS、中间件、框架系统漏洞集合
  ☆99Mar 3, 2021Updated 4 years ago
• AlphabugX / port_tunnel

  View on GitHub
  这个工具只是临时名称，我称他为端口隧道技术，解决隔离内网上线问题。
  ☆78May 31, 2022Updated 3 years ago
• bufsnake / blueming

  View on GitHub
  备份文件扫描，并自动进行下载
  ☆130Jul 26, 2023Updated 2 years ago
• YoungBear / FastjsonPoc

  View on GitHub
  fastjson漏洞POC代码
  ☆105May 29, 2022Updated 3 years ago