nacos api bypass & jwt bypass & get all configs
☆43Aug 9, 2023Updated 3 years ago
Alternatives and similar repositories for nacosScan
Users that are interested in nacosScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Nacos JRaft Hessian 反序列化 RCE EXP☆64Jun 13, 2023Updated 3 years ago
- 基于原版 frp 二开, 添加了一些小功能☆106Jan 29, 2024Updated 2 years ago
- Java CVE Vulnerability Environment☆45Jun 11, 2024Updated 2 years ago
- EHole(棱洞)二开新增hunter接口、指纹、集成fscan的poc扫描功能☆98Dec 5, 2023Updated 2 years ago
- ☆252Feb 25, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- JDBC Attack Tricks☆155Sep 3, 2023Updated 3 years ago
- Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul☆93Oct 30, 2023Updated 3 years ago
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆124Aug 9, 2024Updated 2 years ago
- 一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理☆297Aug 8, 2023Updated 3 years ago
- windows 添加管理员--Rust版本☆43Jul 7, 2022Updated 4 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案（修改为使用ceye接收请求，添加自定义DNS服务器）☆287Aug 20, 2023Updated 3 years ago
- 一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆866Aug 30, 2023Updated 3 years ago
- detect gitlab detail version☆56Aug 26, 2024Updated 2 years ago
- 红队渗透：Harbor 公开镜像地址批量获取脚本☆11Mar 4, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆15Jul 7, 2024Updated 2 years ago
- ☆521Sep 16, 2022Updated 4 years ago
- 一个调用 rustscan 进行端口扫描的 go 库☆21Dec 30, 2021Updated 4 years ago
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated 2 years ago
- 无需文件落地Agent内存马生成器☆244May 30, 2024Updated 2 years ago
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆280Nov 28, 2023Updated 2 years ago
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 3 years ago
- NACOS漏洞利用脚本，检测默认弱口令，未授权，以及任意用户添加☆15May 28, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆109Jan 8, 2021Updated 5 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- MySQL_Fake_Server-啄木鸟yso适配版☆46Sep 20, 2024Updated 2 years ago
- TeamView Get PassWord☆73Feb 20, 2022Updated 4 years ago
- Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践☆229Aug 8, 2023Updated 3 years ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆141Mar 11, 2024Updated 2 years ago
- 一个基于JavaFX写的一个Hunter资产测绘平台的图形化工具☆120Nov 9, 2022Updated 3 years ago
- Nacos Derby命令执行漏洞利用脚本☆153Apr 7, 2025Updated last year
- sliver-webhook 实现上线通知☆25Jun 28, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 宏景ehr sql注入的tamper脚本（sqlmap使用）☆35Jun 14, 2023Updated 3 years ago
- Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件☆1,337Jul 10, 2026Updated 3 months ago
- grs内网穿透工具通过reality协议隐藏特征☆635Aug 8, 2026Updated 2 months ago
- 未授权检测的命令行版，支持批量检测☆158Apr 5, 2025Updated last year
- Magisk burpsuite 证书模块，在安卓10以上通过magisk模块快速安装burpsuite证书☆40Feb 2, 2023Updated 3 years ago
- 一个垃圾利用工具，半自动发包机器☆227Sep 8, 2022Updated 4 years ago
- 利用代理驱动绕过JDBC Attack检测☆144Jun 15, 2025Updated last year