Alternatives and similar repositories for upload-labs

Users that are interested in upload-labs are comparing it to the libraries listed below

• c0ny1 / vulstudy

  View on GitHub
  使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。
  ☆2,420Mar 25, 2020Updated 5 years ago
• Audi-1 / sqli-labs

  View on GitHub
  SQLI labs to test error based, Blind boolean based, Time based.
  ☆5,717Dec 11, 2023Updated 2 years ago
• rebeyond / Behinder

  View on GitHub
  “冰蝎”动态二进制加密网站管理客户端
  ☆6,129Aug 24, 2023Updated 2 years ago
• zhuifengshaonianhanlu / pikachu

  View on GitHub
  一个好玩的Web安全-漏洞测试平台
  ☆4,280Dec 19, 2023Updated 2 years ago
• TheKingOfDuck / fuzzDicts

  View on GitHub
  You Know, For WEB Fuzzing !
  ☆8,255Nov 13, 2023Updated 2 years ago
• AntSwordProject / antSword

  View on GitHub
  中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
  ☆4,466Jan 20, 2025Updated last year
• c0ny1 / xxe-lab

  View on GitHub
  一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
  ☆815Nov 28, 2022Updated 3 years ago
• Medicean / VulApps

  View on GitHub
  快速搭建各种漏洞环境(Various vulnerability environment)
  ☆3,788Oct 27, 2020Updated 5 years ago
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,021Feb 23, 2022Updated 3 years ago
• BeichenDream / Godzilla

  View on GitHub
  哥斯拉
  ☆4,329Jul 17, 2024Updated last year
• chaitin / xray

  View on GitHub
  一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
  ☆11,430Oct 29, 2024Updated last year
• fofapro / vulfocus

  View on GitHub
  🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。
  ☆3,433Sep 9, 2025Updated 5 months ago
• vulhub / vulhub

  View on GitHub
  Pre-Built Vulnerable Environments Based on Docker-Compose
  ☆20,245Feb 6, 2026Updated last week
• c0ny1 / upload-fuzz-dic-builder

  View on GitHub
  上传漏洞fuzz字典生成脚本
  ☆1,271Apr 1, 2021Updated 4 years ago
• shmilylty / OneForAll

  View on GitHub
  OneForAll是一款功能强大的子域收集工具
  ☆9,601Sep 12, 2025Updated 5 months ago
• Bypass007 / Emergency-Response-Notes

  View on GitHub
  应急响应实战笔记，一个安全工程师的自我修养。
  ☆5,507Jun 26, 2023Updated 2 years ago
• rabbitmask / WeblogicScan

  View on GitHub
  Weblogic一键漏洞检测工具，V1.5，更新时间：20200730
  ☆2,263May 22, 2023Updated 2 years ago
• HatBoy / Struts2-Scan

  View on GitHub
  Struts2全漏洞扫描利用工具
  ☆2,209Jul 12, 2021Updated 4 years ago
• H4ckForJob / dirmap

  View on GitHub
  An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工…
  ☆3,358Oct 21, 2025Updated 3 months ago
• k8gege / K8tools

  View on GitHub
  K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…
  ☆6,149Jan 25, 2025Updated last year
• aleenzz / Cobalt_Strike_wiki

  View on GitHub
  Cobalt Strike系列
  ☆2,411Dec 3, 2023Updated 2 years ago
• Lucifer1993 / struts-scan

  View on GitHub
  Python2编写的struts2漏洞全版本检测和利用工具
  ☆1,420May 7, 2019Updated 6 years ago
• lijiejie / subDomainsBrute

  View on GitHub
  A fast sub domain brute tool for pentesters
  ☆3,600Sep 15, 2022Updated 3 years ago
• shack2 / SNETCracker

  View on GitHub
  超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。
  ☆2,694Jul 29, 2020Updated 5 years ago
• hongriSec / PHP-Audit-Labs

  View on GitHub
  一个关于PHP的代码审计项目
  ☆1,910Sep 17, 2019Updated 6 years ago
• l3m0n / pentest_study

  View on GitHub
  从零开始内网渗透学习
  ☆3,009Apr 8, 2016Updated 9 years ago
• zhzyker / exphub

  View on GitHub
  Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…
  ☆4,276Apr 4, 2021Updated 4 years ago
• SecWiki / CMS-Hunter

  View on GitHub
  CMS漏洞测试用例集合
  ☆1,767Dec 20, 2018Updated 7 years ago
• LandGrey / webshell-detect-bypass

  View on GitHub
  绕过专业工具检测的Webshell研究文章和免杀的Webshell
  ☆1,732Nov 15, 2020Updated 5 years ago
• aleenzz / MYSQL_SQL_BYPASS_WIKI

  View on GitHub
  mysql注入,bypass的一些心得
  ☆1,329Jun 25, 2024Updated last year
• Threezh1 / JSFinder

  View on GitHub
  JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
  ☆2,909Nov 24, 2021Updated 4 years ago
• tennc / webshell

  View on GitHub
  This is a webshell open source project
  ☆10,683Dec 24, 2024Updated last year
• yzddmr6 / webshell-venom

  View on GitHub
  免杀webshell无限生成工具
  ☆1,290Apr 3, 2020Updated 5 years ago
• 0verSp4ce / DoraBox

  View on GitHub
  DoraBox - Basic Web Vulnerability Training
  ☆802Jul 15, 2023Updated 2 years ago
• AntSwordProject / AntSword-Loader

  View on GitHub
  AntSword 加载器
  ☆2,751Jun 17, 2019Updated 6 years ago
• lijiejie / GitHack

  View on GitHub
  A `.git` folder disclosure exploit
  ☆3,508Feb 1, 2023Updated 3 years ago
• bowu678 / php_bugs

  View on GitHub
  PHP代码审计分段讲解
  ☆1,721Aug 29, 2022Updated 3 years ago
• k8gege / Ladon

  View on GitHub
  Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列…
  ☆5,258Mar 24, 2025Updated 10 months ago
• Leezj9671 / Pentest_Interview

  View on GitHub
  个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~
  ☆1,966Sep 18, 2021Updated 4 years ago