Alternatives and similar repositories for threat-modeling

Users that are interested in threat-modeling are comparing it to the libraries listed below

• 1diot9 / MyJavaSecStudy

  View on GitHub
  在Java安全学习过程中的笔记和代码
  ☆77Feb 3, 2026Updated last week
• Ape1ron / SpringAopInDeserializationDemo1

  View on GitHub
  在spring-aop中新发现的反序列化gadget-chain
  ☆52Jan 12, 2025Updated last year
• LDrakura / CVE-Monitor

  View on GitHub
  GitHubApi CVE Poc监控工具
  ☆14Jan 23, 2026Updated 3 weeks ago
• latortuga71 / GoPsExec

  View on GitHub
  Basic Psexec clone, but in golang.
  ☆16Jul 2, 2022Updated 3 years ago
• Msup5 / JeecgGo

  View on GitHub
  JeecgBoot Go版本综合漏洞检测工具
  ☆78Oct 28, 2025Updated 3 months ago
• Schira4396 / HrmsTamper

  View on GitHub
  适用于某EHR&HRM的加解密工具，可直接用于sqlmap
  ☆25Jan 14, 2024Updated 2 years ago
• p1d3er / KillEverything

  View on GitHub
  Kill Everything AV/EDR
  ☆27Nov 18, 2024Updated last year
• yxiatian / SimPhish

  View on GitHub
  ☆49Dec 30, 2025Updated last month
• adeljck / MS17-010

  View on GitHub
  MS17-010 Exploits With Original NSA Tool(only for windows)
  ☆30Jul 30, 2024Updated last year
• Seven1an / TomcatMemshellScanner

  View on GitHub
  支持Tomcat内存马查杀的JSP脚本
  ☆65Jun 16, 2025Updated 8 months ago
• adeljck / YongYou-Exploit

  View on GitHub
  YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services
  ☆28Sep 28, 2025Updated 4 months ago
• 0xrumble / BytecodeScreen

  View on GitHub
  ☆50Nov 4, 2022Updated 3 years ago
• yezere / codeql_n1ght

  View on GitHub
  方便自己搭建codeql环境和数据库的工具。
  ☆64Aug 16, 2025Updated 5 months ago
• DawnT0wn / Learning-History

  View on GitHub
  在学习过程中的一些记录
  ☆23Oct 5, 2025Updated 4 months ago
• TheBeastofwar / linuxhacker

  View on GitHub
  一款linux 内网渗透辅助工具
  ☆78Jan 31, 2024Updated 2 years ago
• zilong3033 / ShiroScan

  View on GitHub
  burp插件 ShiroScan 主要用于框架、无dnslog key检测，在大佬的基础上加入shiro>1.2.42(AES GCM)
  ☆17May 6, 2021Updated 4 years ago
• Y4Sec-Team / no-templates

  View on GitHub
  如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过
  ☆53Sep 10, 2023Updated 2 years ago
• book4yi / Winscan

  View on GitHub
  一键Windows应急响应检测脚本
  ☆112Sep 5, 2024Updated last year
• xiaogang000 / XG_JLGJ

  View on GitHub
  专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选
  ☆60Jun 12, 2025Updated 8 months ago
• Lya0 / GoSecCode-codeql

  View on GitHub
  一个基于Codeql规则的go靶场
  ☆41Feb 19, 2025Updated 11 months ago
• SEC-CAFE / handbook

  View on GitHub
  安全手册，企业安全实践、攻防与安全研究知识库
  ☆40Nov 28, 2024Updated last year
• yesir0x00 / bypass_aspx_py

  View on GitHub
  免杀生成aspx的脚本
  ☆26Sep 22, 2024Updated last year
• kN6jq / JeecgCracker

  View on GitHub
  JeecgCracker 是一个专门针对 JeecgBoot 框架的密码爆破工具。
  ☆29Oct 29, 2024Updated last year
• lucsemassa / ad_share_enum

  View on GitHub
  Active Directory share enumeration tool
  ☆12Apr 28, 2025Updated 9 months ago
• wgpsec / redc

  View on GitHub
  Next-generation IaC tools | 下一代基础设施管理工具
  ☆118Feb 9, 2026Updated last week
• Jumbo-WJB / portreuse

  View on GitHub
  portreuse reuseport 端口复用
  ☆61Aug 27, 2023Updated 2 years ago
• freeFV / ShortPayload

  View on GitHub
  如何将Java反序列化Payload极致缩小
  ☆69Jan 18, 2022Updated 4 years ago
• lz520520 / java-object-searcher

  View on GitHub
  ☆22Feb 21, 2025Updated 11 months ago
• H3rmesk1t / Predator

  View on GitHub
  内网综合扫描工具
  ☆44Apr 16, 2024Updated last year
• cwkiller / ClassLinefix

  View on GitHub
  Java bytecode line number restoration tool
  ☆134Aug 31, 2025Updated 5 months ago
• yusinomy / Rpcon

  View on GitHub
  内网横向利用工具，用于ssh wmiexec等常规服务，也可以当作一个数据库执行命令工具
  ☆68May 15, 2023Updated 2 years ago
• A7cc / Vulnerabilities_Server

  View on GitHub
  一个集合了多种语言的实战化Web靶场 | A practical Web shooting range that integrates multiple languages
  ☆82Updated this week
• BambiZombie / bypass_uac_bof

  View on GitHub
  一个普通的BOF用来BypassUAC
  ☆22Apr 6, 2024Updated last year
• 3stoneBrother / code-audit

  View on GitHub
  ☆79Updated this week
• Q16G / memory-shell

  View on GitHub
  memory-shell for hook tcp connection and impl origin socks5 proxy
  ☆42Aug 5, 2025Updated 6 months ago
• Whoopsunix / utf-8-overlong-encoding

  View on GitHub
  抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组
  ☆139Mar 11, 2024Updated last year
• Zephyr236 / CTinyBeacon

  View on GitHub
  ☆17Jun 16, 2025Updated 8 months ago
• y00ga-sec / Trustify

  View on GitHub
  Attack Active Directory Trusts with a single tool
  ☆14Jan 15, 2025Updated last year
• BushANQ / Get_AV

  View on GitHub
  在线安软识别
  ☆12Aug 6, 2025Updated 6 months ago