Thinkphp各版本漏洞验证脚本
☆32Mar 16, 2023Updated 2 years ago
Alternatives and similar repositories for thinkphp_scan
Users that are interested in thinkphp_scan are comparing it to the libraries listed below
Sorting:
- shiro反序列化利用综合利用,包含(回显执行命令/注入内存马)原版中NoCC的问题 https://github.com/j1anFen/shiro_attack☆12May 1, 2022Updated 3 years ago
- 要你命三千,集多种渗透工具于一身的终极武器霸王。☆19Aug 11, 2022Updated 3 years ago
- 分享极梦C团队写的一些使用工具☆57Nov 6, 2023Updated 2 years ago
- 代码审计关键词扫描工具☆11Apr 29, 2024Updated last year
- 基于协程并发的Web敏感文件扫描器,精准探测备份文件、配置泄露及版本控制目录暴露风险,为渗透测试与安全防护提供专业级资产测绘方案。☆12Mar 6, 2025Updated 11 months ago
- ☆10Jun 15, 2024Updated last year
- 泛微 eoffice10 前台 getshell☆59Aug 22, 2022Updated 3 years ago
- 一款不断收集用户体验和功能增改的内网信息收集工具☆31Nov 20, 2023Updated 2 years ago
- 根据域名生成备份文件字典(不扫描)☆23Feb 14, 2023Updated 3 years ago
- Redis 沙盒逃逸(CVE-2022-0543)POC&EXP☆25Jul 23, 2022Updated 3 years ago
- CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合☆10Jul 30, 2022Updated 3 years ago
- 应该是最好用的短文件名扫描脚本了☆11Dec 26, 2022Updated 3 years ago
- 从零开始的内网渗透学习记录☆12Mar 25, 2022Updated 3 years ago
- 移动端渗透测试☆13Aug 7, 2022Updated 3 years ago
- 判断是不是CDN IP,用于收缩目标资产范围☆10Mar 9, 2022Updated 3 years ago
- 参考国外巨佬思路,自己写一个为渗透测试初始化ubuntu虚拟机的bash脚本☆16Oct 13, 2025Updated 4 months ago
- 一个信息收集工具,集合目录扫描(跳过200的伪404),ip端口扫描协议识别☆11Feb 5, 2025Updated last year
- 热门框架/组件/服务漏洞的描述/利用/修复☆12Apr 13, 2023Updated 2 years ago
- SingleSC 10.25 红队免杀 于10.23 24日测试 360核晶与火绒均可过!☆24Oct 27, 2023Updated 2 years ago
- yscan是一款基于go写的端口扫描工具,集masscan+nmap+wappalyzer+证书于一体☆54Jun 12, 2023Updated 2 years ago
- 遥知是一款Web日志分析工具,适用于Nginx和Apache的请求日志分析。☆20Dec 20, 2024Updated last year
- CVE-2021-22205 检测脚本,支持getshell和命令执行☆12Jul 25, 2022Updated 3 years ago
- 亿赛通电子文档安全管理系统-/UploadFileFromClientServiceForClient 任意文件上传漏洞☆13Aug 15, 2023Updated 2 years ago
- CVE-2021-43798 Grafana 任意文件读取漏洞 POC+参数☆14Dec 17, 2021Updated 4 years ago
- 渗透测试学习笔记☆14Jul 9, 2022Updated 3 years ago
- 用base100编码进行免杀 骚~☆12Jan 30, 2023Updated 3 years ago
- Joomla 未授权访问漏洞 CVE-2023-23752☆12Mar 3, 2023Updated 2 years ago
- Apahce-Superset身份认证绕过漏洞(CVE-2023-27524)检测工具☆11Aug 3, 2023Updated 2 years ago
- 一款信息泄漏利用工具,适用于.git/.svn/.DS_Store泄漏和目录列出(dumpall Golang重构版)☆21Apr 8, 2025Updated 10 months ago
- CVE-2022-30780 - lighttpd remote denial of service☆17Mar 16, 2024Updated last year
- Exploit for CVE-2022-27226☆15Mar 19, 2022Updated 3 years ago
- Red Team Tools 快速扫描端口,识别 Web 指纹信息,定位资产类型。辅助红队快速定位目标资产信息。☆61Jul 5, 2022Updated 3 years ago
- SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates☆14Jun 16, 2023Updated 2 years ago
- 一个红队知识仓库☆15Jun 13, 2022Updated 3 years ago
- A Python script to find tenant id an region from a list of domain names.☆16Jan 31, 2025Updated last year
- Nacos JRaft Hessian 反序列化 RCE EXP☆65Jun 13, 2023Updated 2 years ago
- 修改自SharpNoPSExec的基于python的横移工具 A Lateral Movement Tool Learned From SharpNoPSExec -- Twitter: @juliourena☆32May 8, 2021Updated 4 years ago
- 异或shellcode和ppid欺骗免杀☆14Mar 8, 2022Updated 3 years ago
- matoi 渗透测试辅助工具,基于Flask框架☆63Mar 6, 2024Updated last year