收录了GitHub上的一些优质漏洞库，并提供一键下载与更新功能。It includes some high-quality vulnerability libraries on GitHub and provides one-click download and update functions
☆15May 28, 2026Updated last week
Alternatives and similar repositories for VulnerabilityLibrary
Users that are interested in VulnerabilityLibrary are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用Go编写的轻量文件监控器. 可以监控终端上指定文件夹内的变化, 阻止删除,修改,新增操作. 可以用于AWD比赛或者终端应急响应☆37Apr 12, 2026Updated last month
- ☆18Updated this week
- 为渗透测试人 员和开发者设计的纯前端工具集，专注于信息收集和文本处理，纯前端实现的 Web 工具集，提供 URL 处理、路径分析、信息收集等功能。☆16Jun 27, 2025Updated 11 months ago
- 查询当前网页域名备案以及seo，以及对应的企业信息的谷歌浏览器插件☆19Feb 10, 2025Updated last year
- Hikvision 流媒体管理服务器敏感信息泄漏☆18Apr 26, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 基于 Agent + Instrumentation + ASM 的 Java 进程内存马检测与清除查杀工具（含 GUI）+CLI命令行操作功能☆39Oct 27, 2025Updated 7 months ago
- A low-entropy shellcode executor that encodes shellcode bytes into common English words, with anti-debugging capabilities.☆21Aug 10, 2025Updated 10 months ago
- CVE-2025-54424：1Panel 客户端证书绕过RCE漏洞 一体化工具 (扫描+利用)☆59Aug 5, 2025Updated 10 months ago
- 什么？你还在担心welearn刷不完？来试试这款辅助工具☆70Dec 25, 2025Updated 5 months ago
- LilCTF 2025 challenges, source code, official writeups, and players' writeups.☆29Oct 10, 2025Updated 8 months ago
- EMQX Dashboard Malicious Plugin leading to RCE☆47Jun 16, 2025Updated 11 months ago
- 一个为广大安全人员整合的知识框架，目前会涉及到Web安全、Java安全研究、红蓝对抗、应急响应、APP、SRC、CTF等。☆21Jun 30, 2022Updated 3 years ago
- 用于解决渗透测试加解密的难题，让你的burp像测试明文这么简单☆85Aug 10, 2025Updated 10 months ago
- Docker版本的BlueLotus XSSReceiver(包含源代码) - The BlueLotus XSSReceiver with Dockerfile.☆15Nov 23, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- BpArsenal, a Burp Suite plugin that can quickly convert http requests into command-line tool execution, launch third-party tools and open…☆22Oct 31, 2025Updated 7 months ago
- 一个QQBot☆14Dec 5, 2024Updated last year
- 基于AI的BurpSuite漏洞分析插件☆12Sep 21, 2023Updated 2 years ago
- 常见密码哈希离线查询工具 , 包含算法类型'md5', 'md5x2', 'md5x3','sha1', 'ntlm', 'mysql', 'mysql5','md5_sha1', 'sha1_sha1', 'sha1_md5', 'md5_base64','md5_mid…☆96Mar 7, 2024Updated 2 years ago
- Save Multiple URLs 是一款专为渗透测试人员设计的浏览器插件，用于一键记录当前浏览器中打开的所有页面 URL。支持复制到剪贴板或导出为 .txt 文件，帮助你在测试过程中快速保存目标站点，提升工作效率。☆34Jun 16, 2025Updated 11 months ago
- 本书为《C++17 the complete guide》的个人中文翻译，仅供学习和交流使用，侵删☆11Oct 28, 2020Updated 5 years ago
- 蜜罐检测工具，支持自动化URL去重、多线程控制及智能速率限制。可识别伪装服务。☆16Jun 5, 2025Updated last year
- ActiveMQ Deserialization RCE☆15Aug 30, 2019Updated 6 years ago
- sqlmap_gui是一款图形界面化的 SQL 注入漏洞测试工具☆38Mar 28, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Cobalt Strike 插件包，超级缝合怪...☆11Jul 11, 2025Updated 10 months ago
- 一个简易的社工库系统，目前仅针对edusrc下域名☆37May 22, 2021Updated 5 years ago
- 每日最新的漏洞及投毒情报☆38Apr 17, 2026Updated last month
- A lsass dump tool using MiniDumpWriteDump & syscall(NtOpenProcess) technique. only tested on windows 11 with defender enabled:-)☆17Oct 11, 2023Updated 2 years ago
- 用于绕过杀软的加载器☆31Oct 13, 2025Updated 7 months ago
- Mihomo任意文件写，可通过写SSH密钥、cron任务等实现RCE☆13May 21, 2025Updated last year
- 一款集成了Nuclei模板管理、多空间引擎搜索的网络安全工具集。为安全研究人员提供高效的工作体验。☆23Mar 16, 2026Updated 2 months ago
- Virgol渗透测试工具☆96Jun 11, 2025Updated 11 months ago
- Visual Studio .suo文件反序列化漏洞利用工具☆17Jun 28, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 一个红队知识仓库☆11Aug 1, 2023Updated 2 years ago
- 结合四大识别插件优点而集合的专业的全球蜜罐检测工具 - 支持35+种国际蜜罐平台，165+条检测规则。☆80Aug 22, 2025Updated 9 months ago
- NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间☆21Mar 27, 2026Updated 2 months ago
- 一个多源漏洞情报聚合工具，能够从多个权威安全数据源爬取漏洞信息，去重后生成结构化报告。支持自 定义时间范围查询、多格式输出和自动化定时任务。☆33Jun 3, 2026Updated last week
- 在线安软识别☆12Aug 6, 2025Updated 10 months ago
- 对原版JNDIExploit进行修改增加线程和JMX注入内存马☆17Apr 23, 2025Updated last year
- PHP漏洞靶场，涉及OWASP TOP10漏洞，新手必学！☆13Jun 13, 2022Updated 3 years ago