Alternatives and similar repositories for poc_and_exp:

Users that are interested in poc_and_exp are comparing it to the libraries listed below

• flowerwind / JspFinder
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆175Updated 3 years ago
• FunnyWolf / ligolo
  Ligolo : 用于内网渗透的反向隧道
  ☆225Updated 3 years ago
• iiiusky / AntiHoneypot-Chrome-simple
  Chrome 蜜罐检测插件
  ☆296Updated 4 years ago
• ggg4566 / SQLEXP
  SQL 注入利用工具，存在waf的情况下自定义编写tamper脚本 dump数据
  ☆287Updated 4 years ago
• threedr3am / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆215Updated 3 years ago
• Rvn0xsy / Pricking
  基于反向代理的水坑部署工具
  ☆252Updated 3 years ago
• feihong-cs / memShell
  FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
  ☆366Updated 4 years ago
• dr0op / shiro-550-with-NoCC
  Shiro-550 不依赖CC链利用工具
  ☆447Updated 9 months ago
• uknowsec / TailorScan
  自用缝合怪内网扫描器，支持端口扫描，识别服务，获取title，扫描多网卡，ms17010扫描，icmp存活探测。
  ☆279Updated 4 years ago
• jweny / MemShellDemo
  内存马Demo合集 memshell demo for java / php / python
  ☆409Updated 3 years ago
• iceyhexman / flask_memory_shell
  Flask 内存马
  ☆310Updated 4 years ago
• Litch1-v / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆182Updated 3 years ago
• bigsizeme / fastjson-check
  fastjson 被动扫描、不出网payload生成
  ☆366Updated 3 years ago
• c1y2m3 / ATAttack
  敌后侦察
  ☆232Updated 2 years ago
• NyDubh3 / Pentesting-Active-Directory-CN
  域渗透脑图中文翻译版
  ☆276Updated 3 years ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆231Updated 4 years ago
• Macr0phag3 / webshell-bypassed-human
  过人 webshell 的生成工具
  ☆257Updated 3 years ago
• SafeGroceryStore / Caesar
  一个全新的敏感文件发现工具
  ☆269Updated 4 years ago
• moyuwa / 0sec-search
  新版零组资料文库离线漏洞名搜索，功能：更新 、查询 （不包含漏洞详情）
  ☆129Updated 3 years ago
• yuanhaiGreg / Fuzz-Dict
  一些常见字典
  ☆166Updated 3 years ago
• xhycccc / Struts2-Vuln-Demo
  Struts2漏洞实例源码
  ☆206Updated 4 years ago
• r35tart / GetIPinfo
  用于寻找多网卡主机方便内网跨网段渗透避免瞎打找不到核心网
  ☆231Updated 4 years ago
• DSO-Lab / pocscan
  ☆114Updated 4 years ago
• AntSwordProject / AntSword-Labs
  Awesome environment for antsword tests
  ☆178Updated 3 years ago
• doubleee / WebFuzzing
  自用字典，收集实战中遇到的奇特目录名、后门文件名等。不定期更新！
  ☆113Updated last year
• depycode / fastjson-c3p0
  fastjson不出网利用、c3p0
  ☆251Updated 3 years ago
• 0x727 / MetasploitCoop_0x727
  基于msf的后渗透协作平台
  ☆217Updated 3 years ago
• zema1 / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆355Updated 2 years ago
• timwhitez / Frog-checkCDN
  批量检查目标是否为cdn
  ☆140Updated 4 years ago
• bigsizeme / shiro-check
  Shiro反序列化回显利用、内存shell、检查 Burp插件
  ☆216Updated 2 years ago