artsploit/SecLists external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

artsploit/SecLists

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/artsploit/SecLists)

Close

artsploit / SecListsView on GitHubMore

• External links
• Readme badge

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

☆141Feb 19, 2019Updated 7 years ago

Alternatives and similar repositories for SecLists

Users that are interested in SecLists are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• Yt1g3r / CVE-2019-3396_EXP

  View on GitHub
  CVE-2019-3396 confluence SSTI RCE
  ☆174Oct 1, 2020Updated 5 years ago
• mpgn / CVE-2019-7238

  View on GitHub
  🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻
  ☆154Feb 25, 2019Updated 7 years ago
• shengqi158 / fastjson-remote-code-execute-poc

  View on GitHub
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆402Dec 16, 2022Updated 3 years ago
• orangetw / awesome-jenkins-rce-2019

  View on GitHub
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆610May 17, 2019Updated 7 years ago
• fnmsd / awvs_script_decode

  View on GitHub
  解密好的AWVS10.5 data/script/目录下的脚本
  ☆265Nov 11, 2017Updated 8 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• brianwrf / CVE-2018-11788

  View on GitHub
  Apache Karaf XXE Vulnerability (CVE-2018-11788)
  ☆37Jan 6, 2019Updated 7 years ago
• Hpd0ger / InFoCollecter

  View on GitHub
  针对域名/页面的接口爬取，递归模式入库
  ☆21Sep 18, 2019Updated 6 years ago
• nccgroup / freddy

  View on GitHub
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆582Sep 7, 2021Updated 4 years ago
• mpgn / Spring-Boot-Actuator-Exploit

  View on GitHub
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆327Jun 16, 2020Updated 6 years ago
• r35tart / Penetration_Testing_Case

  View on GitHub
  用于记录分享一些有趣的案例
  ☆868Jan 10, 2022Updated 4 years ago
• veracode-research / actuator-testbed

  View on GitHub
  A vulnerable application exposing Spring Boot Actuators
  ☆123Feb 25, 2019Updated 7 years ago
• ggolawski / CVE-2020-1958

  View on GitHub
  CVE-2020-1958 PoC
  ☆21Apr 11, 2020Updated 6 years ago
• c0ny1 / FastjsonExploit

  View on GitHub
  Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
  ☆1,407Dec 16, 2022Updated 3 years ago
• jas502n / CVE-2019-2890

  View on GitHub
  CVE-2019-2890 WebLogic 反序列化RCE漏洞
  ☆44Dec 8, 2019Updated 6 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• uknowsec / BurpSuite-Extender-fastjson

  View on GitHub
  Reference：https://www.w2n1ck.com/article/44/
  ☆156Mar 7, 2020Updated 6 years ago
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆580Jan 28, 2020Updated 6 years ago
• l3yx / springboot-shiro

  View on GitHub
  ☆17Jul 25, 2023Updated 3 years ago
• l3m0n / Bypass_Disable_functions_Shell

  View on GitHub
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,192Oct 17, 2023Updated 2 years ago
• opensec-cn / vtest

  View on GitHub
  用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
  ☆867Jul 21, 2019Updated 7 years ago
• Ridter / redis-rce

  View on GitHub
  Redis 4.x/5.x RCE
  ☆979Nov 30, 2021Updated 4 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• Lucifer1993 / struts-scan

  View on GitHub
  Python2编写的struts2漏洞全版本检测和利用工具
  ☆1,412May 7, 2019Updated 7 years ago
• fate0 / prvd

  View on GitHub
  PHP Runtime Vulnerability Detection
  ☆479May 25, 2019Updated 7 years ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• LandGrey / SpringBootVulExploit

  View on GitHub
  SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
  ☆6,142Mar 10, 2021Updated 5 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆844Jun 7, 2022Updated 4 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• lijiejie / idea_exploit

  View on GitHub
  Gather sensitive information from (.idea) folder for pentesters
  ☆369Aug 5, 2022Updated 4 years ago
• 1120362990 / vulnerability-list

  View on GitHub
  在渗透测试中快速检测常见中间件、组件的高危漏洞。
  ☆724Mar 21, 2022Updated 4 years ago
• pwntester / JVMDeserialization

  View on GitHub
  PoC for Scala and Groovy
  ☆14Apr 4, 2016Updated 10 years ago
• wuppp / shiro_rce_exp

  View on GitHub
  Shiro RCE (Padding Oracle Attack)
  ☆149Nov 15, 2019Updated 6 years ago
• 7dog7 / flash-hijack

  View on GitHub
  flash 劫持轮子，CSRF，劫持，跳转，swf 有需求可以提issues ，src挖掘,劫持response
  ☆86Nov 9, 2019Updated 6 years ago
• jas502n / cve-2018-1273

  View on GitHub
  Spring Data Commons RCE 远程命令执行漏洞
  ☆58Apr 29, 2019Updated 7 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• hktalent / CVE_2020_2546

  View on GitHub
  CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc pyth…
  ☆133Mar 5, 2023Updated 3 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆256Jul 1, 2016Updated 10 years ago
• ramshazar / orangetsai-springboot-actuator-poc

  View on GitHub
  ☆27Mar 6, 2021Updated 5 years ago
• 5up3rc / weblogic_cmd

  View on GitHub
  weblogic t3 deserialization rce
  ☆266Jul 13, 2017Updated 9 years ago
• Banyantoo / GetAppUrl

  View on GitHub
  ☆15Feb 13, 2018Updated 8 years ago
• jas502n / Shiro_Xray

  View on GitHub
  CommonsBeanutils1,CommonsCollectionsK1
  ☆58Nov 16, 2020Updated 5 years ago
• GrrrDog / Java-Deserialization-Cheat-Sheet

  View on GitHub
  The cheat sheet about Java Deserialization vulnerabilities
  ☆3,179May 26, 2023Updated 3 years ago