c0ny1 / xxe-lab
一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
☆788Updated 2 years ago
Alternatives and similar repositories for xxe-lab:
Users that are interested in xxe-lab are comparing it to the libraries listed below
- 上传漏洞fuzz字典生成脚本☆1,248Updated 3 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持☆958Updated 9 months ago
- 从wooyun中提取的payload，以及burp插件☆845Updated 2 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆732Updated 3 years ago
- MSSQL注入提权,bypass的一些总结☆720Updated 9 months ago
- Burpsuite-Plugins-Usage☆509Updated 4 years ago
- XssPayload List . Usage:☆717Updated 5 years ago
- thinkphp v5.x 远程代码执行漏洞-POC集合☆1,132Updated 6 years ago
- bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)☆1,148Updated 3 years ago
- Burp被动扫描流量转发插件☆1,421Updated 9 months ago
- PoCBox - Vulnerability Test Aid Platform☆955Updated last year
- Burp suite 分块传输辅助插件☆1,963Updated 3 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,189Updated last year
- SvnExploit支持SVN源代码泄露全版本Dump源码☆974Updated 2 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,191Updated 3 years ago
- myscan 被动扫描☆662Updated 4 years ago
- PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist☆660Updated 4 years ago
- Shiro<=1.2.4反序列化，一键检测工具☆984Updated 4 years ago
- sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件☆766Updated 5 years ago
- 这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。☆1,150Updated 5 years ago
- Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019…☆468Updated 4 years ago
- Weblogic环境搭建工具☆782Updated 4 years ago
- 提取远程 git 泄露或本地 git 的工具☆463Updated 10 months ago
- ☆181Updated 6 years ago
- AWD攻防赛webshell批量利用框架☆395Updated 5 years ago
- CMS和中间件指纹库☆391Updated 5 years ago
- ☆404Updated 5 years ago
- Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势☆1,373Updated 3 years ago
- Seay源代码审计系统☆717Updated 5 years ago
- 递归式寻找域名和api。☆715Updated last year