SQL 注入利用工具，存在waf的情况下自定义编写tamper脚本 dump数据
☆289Aug 13, 2020Updated 6 years ago
Alternatives and similar repositories for SQLEXP
Users that are interested in SQLEXP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- spider web site request traffic to xray scanner.☆24Jun 23, 2020Updated 6 years ago
- SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE☆231Dec 5, 2020Updated 5 years ago
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆710May 10, 2021Updated 5 years ago
- 一个LDAP请求监听器，摆脱dnslog平台☆289Apr 7, 2023Updated 3 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆761Apr 14, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。☆125May 14, 2021Updated 5 years ago
- 一款可以在不出网的环境下进行反向代理及cs上线的工具☆492Apr 26, 2023Updated 3 years ago
- Java RCE 回显测试代码☆1,008Oct 15, 2020Updated 5 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆356Mar 12, 2020Updated 6 years ago
- 通过 Redis 主从写出无损文件☆719May 25, 2020Updated 6 years ago
- 一个简单的现代化公司域名使用规律预测及生成工具☆388Feb 24, 2022Updated 4 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,020May 21, 2024Updated 2 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,192Oct 17, 2023Updated 2 years ago
- EHole(棱洞)-红队重点攻击系统指纹探测工具☆468Jan 27, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 关于安全狗和云锁的自动化绕过脚本☆522Nov 15, 2021Updated 4 years ago
- 一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代 理。☆290Mar 14, 2021Updated 5 years ago
- woodpecker框架weblogic信息探测插件☆186Mar 23, 2022Updated 4 years ago
- 用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密☆250Aug 26, 2020Updated 5 years ago
- weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…☆2,073Nov 24, 2023Updated 2 years ago
- （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）☆616Dec 29, 2021Updated 4 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,398Jan 18, 2022Updated 4 years ago
- AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell☆161Sep 28, 2021Updated 4 years ago
- 一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具☆738Dec 8, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- mysql注入,bypass的一些心得☆1,329Jun 25, 2024Updated 2 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆369Jun 19, 2024Updated 2 years ago
- Burp suite 分块传输辅助插件☆2,030Feb 23, 2022Updated 4 years ago
- SRC子域名资产监控☆1,294Jan 14, 2021Updated 5 years ago
- Bypass firewall for traffic forwarding using webshell☆1,426Sep 29, 2021Updated 4 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- 中国蚁剑后渗透框架☆943Jan 18, 2024Updated 2 years ago
- Burp被动扫描流量转发插件☆1,463Jun 17, 2024Updated 2 years ago
- 记录自己编写、修改的部分工具☆1,472Oct 19, 2025Updated 9 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 从wooyun中提取的payload，以及burp插件☆840Jun 17, 2022Updated 4 years ago
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆272Mar 4, 2022Updated 4 years ago
- 无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞 的验证和利用。☆404Dec 21, 2025Updated 7 months ago
- 递归式寻找域名和api。☆723Aug 3, 2023Updated 3 years ago
- 清除Go编译时自带的信息☆851Jul 20, 2022Updated 4 years ago
- 一键提取安卓应用中可能存在的敏感信息。☆1,003Oct 21, 2021Updated 4 years ago
- 高危漏洞精准检测与深度利用框架☆1,464Jan 8, 2023Updated 3 years ago