Alternatives and similar repositories for improper:

Users that are interested in improper are comparing it to the libraries listed below

• xiecat / sylas
  根据多个不同地区进行聚合查询以获取更多 fofa 数据
  ☆28Updated last year
• feihong-cs / jre8u20_gadget
  jre8u20 gadget
  ☆33Updated 3 years ago
• Ciyfly / sucker
  对任意http网站添加指定漏洞 目前实现部分漏洞的追加 支持本身http服务 支持反向代理追加
  ☆28Updated 2 years ago
• JulianWu520 / ysoserial-mangguogan
  ☆4Updated 4 years ago
• YoungRichOG / WhoisSubdomain
  通过Whois信息发现更多与目标有关联的域名，扩大攻击面
  ☆14Updated 3 years ago
• cyal1 / bypass-40x
  bypass 401/403
  ☆13Updated 2 years ago
• jas502n / GitlabVer
  gitlab version index
  ☆62Updated 3 years ago
• orleven / Celestion
  Celestion 是一个无回显漏洞测试辅助平台，平台使用flask编写，提供DNSLOG，HTTPLOG等功能。 (界面懒得弄，后续有需要再说)。
  ☆30Updated last year
• feihong-cs / Attacking_Shiro_with_CVE_2020_2555
  ☆49Updated 4 years ago
• RASSec / WebExp
  2020年~2021年 网站CMS、中间件、框架系统漏洞集合
  ☆36Updated 4 years ago
• H3rmesk1t / Fastjson-Gadgets-Automatic-Scanner
  Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …
  ☆50Updated 3 years ago
• SecCoder-Security-Lab / spring-cloud-netflix-hystrix-dashboard-cve-2021-22053
  Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053
  ☆37Updated 2 years ago
• Firebasky / GoRmi
  该项目是通过go语言实现防止rmi利用被反置的问题。
  ☆44Updated 3 years ago
• ShangRui-hash / bucket-takeover-lab
  子域名接管的几种变体靶场
  ☆23Updated 10 months ago
• UnicodeSec / Blogs
  宽字节安全团队的博客
  ☆30Updated 4 years ago
• CHYbeta / URLFilterBypassDemo
  ☆29Updated 3 years ago
• Goqi / Ni
  Ni-nuclei二开
  ☆38Updated last year
• gh0stkey / Repeater-Tab-Highlighter
  Burp extension to allow you to highlight Repeater tabs.
  ☆10Updated 3 years ago
• 0xmin / awvs-scan
  awvs-scan 是一款调用 AWVS 13.x API 的自动化工具
  ☆25Updated 2 years ago
• EvilPulsar / S2-061
  some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute
  ☆69Updated 4 years ago
• anneviliu / awvs_xray_url_batch-import
  用于解决awvs和xray联动时url批量导入并扫描的小脚本
  ☆16Updated 4 years ago
• hhxy / e-message_exp
  e-mesaage <=4.15 后台jar包上传exp
  ☆47Updated 6 years ago
• Ormicron / ShiroDecrypter
  一个解密 Shiro-rememberMe的图形化小工具，支持cbc和gcm。
  ☆25Updated 3 years ago
• Maskhe / BugBountyNotes
  简单记录下自己在挖掘SRC
  ☆32Updated 4 years ago
• yumusb / Yapi_Rce
  Yapi RCE漏洞批量验证与伪交互SHELL
  ☆41Updated 3 years ago
• qiygan / fofa-dump
  Fofa Pro Api下载工具
  ☆17Updated 5 years ago
• tangxiaofeng7 / Spring-Cloud-Function-Spel
  Spring Cloud Function Spel命令执行漏洞
  ☆38Updated 3 years ago
• Wfzsec / ysoserial-poc
  记录调试分析ysoserial系列的学习过程，主要包含手动构造的一些poc，便于加深对漏洞和工具的理解
  ☆30Updated 4 years ago
• safe6Sec / WeblogicVuln
  记录weblogic的一些漏洞原理
  ☆16Updated 3 years ago
• iSafeBlue / presentation-slides
  ☆33Updated 2 years ago