解答开发关于安全漏洞的常见问题
☆41Apr 30, 2020Updated 5 years ago
Alternatives and similar repositories for secqa
Users that are interested in secqa are comparing it to the libraries listed below
Sorting:
- 渗透测试复盘总结☆15Jul 16, 2020Updated 5 years ago
- Tomcat基于动态注册Filter的无文件Webshell☆26Jun 20, 2020Updated 5 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆117Dec 30, 2021Updated 4 years ago
- 收藏webshell☆25Mar 14, 2022Updated 4 years ago
- Collect the EN name with the highest frequency of use -CN Name☆15Nov 7, 2017Updated 8 years ago
- 利用chrome扩展 dump 浏览器cookie https://saucer-man.com/information_security/787.html☆15Sep 9, 2021Updated 4 years ago
- 模拟cobalt strike beacon上线包. Simulation cobalt strike beacon connection packet.☆17Sep 9, 2021Updated 4 years ago
- vRealize RCE + Privesc (CVE-2021-21975, CVE-2021-21983, CVE-0DAY-?????)☆39Apr 7, 2021Updated 4 years ago
- check cs yara rules☆42Sep 7, 2021Updated 4 years ago
- ☆46Jul 13, 2021Updated 4 years ago
- ...Webshell☆16Jul 2, 2020Updated 5 years ago
- TaiO 的定位是一款用于攻击方对靶标资产梳理,快速定位脆弱资产的网络空间测绘工具☆75Mar 9, 2022Updated 4 years ago
- ☆83Nov 20, 2021Updated 4 years ago
- Apache Druid 任意文件读取☆33Oct 15, 2021Updated 4 years ago
- 微软签名缺陷利用,老技术☆18Aug 10, 2021Updated 4 years ago
- ☆28Dec 2, 2021Updated 4 years ago
- Load ssp dll golang implementation☆19Jan 18, 2022Updated 4 years ago
- 针对目标已知信息的字典生成工具☆209Sep 21, 2022Updated 3 years ago
- ☆35Jan 24, 2022Updated 4 years ago
- 高危漏洞精准检测与深度利用框架☆1,458Jan 8, 2023Updated 3 years ago
- golang+c#乱写了一个基于http的垃圾远控(支持团队协同作战,功能很少)(三端)☆43Feb 21, 2022Updated 4 years ago
- ☆11Mar 9, 2022Updated 4 years ago
- 使得Cobaltstrike支持Atexec☆89Jun 30, 2020Updated 5 years ago
- ☆13Jan 24, 2022Updated 4 years ago
- HackerOne Staffs☆29Dec 9, 2019Updated 6 years ago
- 应急响应实战笔记,一个安全工程师的自我修养。☆20Jun 2, 2019Updated 6 years ago
- 结合反射调用、动态编译、BCEL、defineClass0,ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具☆19Dec 16, 2021Updated 4 years ago
- 整理收集Struts2漏洞环境☆270Jan 9, 2018Updated 8 years ago
- 一个简单的现代化公司域名使用规律预测及生成工具☆388Feb 24, 2022Updated 4 years ago
- fastjson 1.2.68 版本 autotype bypass☆142Jun 17, 2022Updated 3 years ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆55Oct 29, 2022Updated 3 years ago
- NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than other script☆87Feb 17, 2022Updated 4 years ago
- ☆42May 14, 2024Updated last year
- A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …☆268Oct 17, 2025Updated 5 months ago
- POC for leaking java version through file and ftp protocols☆24Nov 1, 2020Updated 5 years ago
- 基于Burp插件开发打造渗透测试自动化☆422Dec 7, 2021Updated 4 years ago
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具☆2,014May 21, 2024Updated last year
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆728Mar 21, 2022Updated 4 years ago
- 源代码漏洞の审计☆828Jul 2, 2024Updated last year