Alternatives and similar repositories for FofaScan

Users that are interested in FofaScan are comparing it to the libraries listed below

• chroblert / JC-AntiToken
  burp插件：python版，token防重放绕过
  ☆21Updated 4 years ago
• ByHuaiNian / exploit_verify_tools
  基于JavaFx编写的C/S图形化界面漏洞验证工具集。
  ☆24Updated 3 years ago
• likeNlong / github_findpath
  从github爬取路径然后生成字典用来爆破，针对利用开源github搭建的网站的路径提取
  ☆27Updated 2 years ago
• winezer0 / burp-wildcard-plus
  burpsuite wildcard 插件维护分支
  ☆1Updated 2 years ago
• Weik1 / scan_screenshot
  golang写的批量对目标网站进行截图的小工具，适合目标资产比较多时，快速定位薄弱点。
  ☆32Updated 2 years ago
• 7dog7 / RuleSubDomain
  规则组合子域名字典生成
  ☆28Updated 5 years ago
• 0cat-r / jslink_XRAY
  从js文件中提取url等并与Xray联动
  ☆19Updated 2 years ago
• sp4zcmd / Ruoyi-All
  若依后台定时任务一键利用
  ☆17Updated 3 years ago
• guguyu1 / tomcat_password
  tomcat 图形化弱口令爆破 也可以作为401认证爆破
  ☆13Updated 4 years ago
• SakuraHack-Y / Landray-oa-rce
  蓝凌oa无回显rce漏洞poc脚本
  ☆1Updated 2 years ago
• S9MF / ShiroScan2
  基于BurpShiroPassiveScan修改增加了Xray回显链生成
  ☆54Updated 2 years ago
• cyxshizhu / OA-ezOFFICE
  ☆12Updated 3 years ago
• freeFV / Tencent_Yun_tools
  ☆36Updated 3 years ago
• MzzdToT / Kingdee_erp_Unserialize_rce
  金蝶云星空 erp反序列化命令执行漏洞批量扫描POC&EXP，带命令回显
  ☆32Updated last year
• webraybtl / tongdaoa_poc
  详见公众号
  ☆39Updated last year
• r00tuser111 / SerializationDumper-Shiro
  基于SerializationDumper的Shiro Cookie序列化数据解密小工具
  ☆53Updated 4 years ago
• ddwGeGe / SunloginRCE_GUITools
  ☆23Updated 2 years ago
• 7ten7 / WorkflowServiceXml-Exploit
  ☆31Updated 3 years ago
• woodpecker-framework / woodpecker-requests
  woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。
  ☆67Updated 2 years ago
• durkworf / spring-boot-webshell
  ☆22Updated 3 years ago
• Conan924 / goby-wiki
  根据goby查重poc的接口实现,可以当做漏洞库索引,查缺补漏
  ☆13Updated 2 years ago
• i11us0ry / tools-gophish
  gophish批量操作，适用于大批量钓鱼演练
  ☆31Updated 4 years ago
• ImuSpirit / ThinkPHP_RCE
  一款综合漏洞利用工具箱。
  ☆52Updated 2 years ago
• ScorpionsMAX / CVE-2021-43798-Grafana-POC
  CVE-2021-43798 Grafana 任意文件读取漏洞 POC+参数
  ☆14Updated 3 years ago
• yyhuni / shiroMemshell
  利用shiro反序列化注入冰蝎内存马
  ☆35Updated 3 years ago
• Jeromeyoung / log4j2burpscanner
  CVE-2021-44228，log4j2 burp插件 Java版本，dnslog选取了非dnslog.cn域名
  ☆31Updated 3 years ago
• xinxin999 / Exp-collect
  ☆29Updated 3 years ago
• Dghpi9 / NacosDefaultToken
  Alibaba Nacos存在默认token.secret.key，导致远程攻击者可以绕过密钥认证接管Nacos
  ☆18Updated 2 years ago
• rambleZzz / jmxbfGUI
  jmx未授权访问 弱口令批量检测 GUI工具
  ☆31Updated 2 years ago
• hhxy / e-message_exp
  e-mesaage <=4.15 后台jar包上传exp
  ☆47Updated 6 years ago