SQL 注入利用工具，存在waf的情况下自定义编写tamper脚本 dump数据
☆288Aug 13, 2020Updated 5 years ago
Alternatives and similar repositories for SQLEXP
Users that are interested in SQLEXP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- spider web site request traffic to xray scanner.☆24Jun 23, 2020Updated 5 years ago
- SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE☆230Dec 5, 2020Updated 5 years ago
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆712May 10, 2021Updated 4 years ago
- 一个LDAP请求监听器，摆脱dnslog平台☆291Apr 7, 2023Updated 2 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆753Apr 14, 2021Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。☆125May 14, 2021Updated 4 years ago
- 一款可以在不出网的环境下进行反向代理及cs上线的工具☆491Apr 26, 2023Updated 2 years ago
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆357Mar 12, 2020Updated 6 years ago
- 通过 Redis 主从写出无损文件☆718May 25, 2020Updated 5 years ago
- 一个简单的现代化公司域名使用规律预测及生成工具☆388Feb 24, 2022Updated 4 years ago
- JNDI服务利用工 具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,015May 21, 2024Updated last year
- EHole(棱洞)-红队重点攻击系统指纹探测工具☆471Jan 27, 2021Updated 5 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,198Oct 17, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 关于安全狗和云锁的自动化绕过脚本☆523Nov 15, 2021Updated 4 years ago
- woodpecker框架weblogic信息探测插件☆185Mar 23, 2022Updated 4 years ago
- 用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密☆250Aug 26, 2020Updated 5 years ago
- （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）☆614Dec 29, 2021Updated 4 years ago
- weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…☆2,070Nov 24, 2023Updated 2 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,405Jan 18, 2022Updated 4 years ago
- AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell☆163Sep 28, 2021Updated 4 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆366Jun 19, 2024Updated last year
- mysql注入,bypass的一些心得☆1,327Jun 25, 2024Updated last year
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- 一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具☆740Dec 8, 2022Updated 3 years ago
- Burp suite 分块传输辅助插件☆2,029Feb 23, 2022Updated 4 years ago
- SRC子域名资产监控☆1,298Jan 14, 2021Updated 5 years ago
- Bypass firewall for traffic forwarding using webshell☆1,431Sep 29, 2021Updated 4 years ago
- 中国蚁剑后渗透框架☆942Jan 18, 2024Updated 2 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- Burp被动扫描流量转发插件☆1,459Jun 17, 2024Updated last year
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆270Mar 4, 2022Updated 4 years ago
- 记录自己编写、修改的部分工具☆1,465Oct 19, 2025Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 从wooyun中提取的payload，以及burp插件☆841Jun 17, 2022Updated 3 years ago
- 无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。☆403Dec 21, 2025Updated 3 months ago
- 递归式寻找域名和api。☆722Aug 3, 2023Updated 2 years ago
- 清除Go编译时自带的信息☆854Jul 20, 2022Updated 3 years ago
- 一键提取安卓应用中可能存在的敏感信息。☆1,010Oct 21, 2021Updated 4 years ago
- 高危漏洞精准检测与深度利用框架☆1,458Jan 8, 2023Updated 3 years ago
- 基于向日葵RCE的本地权限提升，无需指定端口☆210Feb 24, 2022Updated 4 years ago