gh0stkey / Web-Fuzzing-BoxLinks
Web Fuzzing Box - Web 模糊测试字典与一些Payloads
☆2,333Updated last month
Alternatives and similar repositories for Web-Fuzzing-Box
Users that are interested in Web-Fuzzing-Box are comparing it to the libraries listed below
Sorting:
- 红队作战中比较常遇到的一些重点系统漏洞整理。☆2,506Updated 3 years ago
- Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…☆3,090Updated last year
- domain_hunter的高级版本,SRC挖洞、HW打点之必备!自动化资产收集;快速Title获取;外部工具联动;等等☆2,059Updated last month
- EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具☆3,307Updated last year
- 构建优化高效的渗透 fuzz 字典合集☆1,805Updated 3 weeks ago
- 利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点☆2,324Updated 2 years ago
- 红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool☆1,967Updated last week
- Passive Security Scanner (被动式安全扫描器)☆1,939Updated 2 years ago
- 一款红队在大量的资产中存活探测与重点攻击系统指纹探测工具☆1,676Updated last year
- shiro反序列化漏洞综合利用,包含(回显执行命令/注入内存马)修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack☆2,250Updated last year
- Struts2全漏洞扫描利用工具☆2,191Updated 4 years ago
- ☆1,475Updated 2 years ago
- 日常积累的 一些红队工具及自己写的脚本,更偏向于一些diy的好用的工具,并不是一些比较常用的msf/awvs/xray这种☆1,393Updated 10 months ago
- 收集的文章 https://mrwq.github.io/tools/paper/☆1,945Updated last month
- Kunyu, more efficient corporate asset collection☆1,039Updated 5 months ago
- A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.☆1,707Updated last year
- 一款信息泄漏利用工具,适用于.git/.svn/.DS_Store泄漏和目录列出☆1,485Updated 2 years ago
- Weblogic 一键漏洞检测工具,V1.5,更新时间:20200730☆2,231Updated 2 years ago
- 工欲善其事,必先利其器☆1,589Updated 3 years ago
- 关于红队方面的学习资料☆1,358Updated last year
- A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅☆1,778Updated 3 months ago
- 针对 Acunetix AWVS扫描器开发的批量扫描脚本,支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项,支持联动xray、burp、w13scan等被动批量☆1,221Updated 10 months ago
- MDUT - Multiple Database Utilization Tools☆2,134Updated last year
- 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.☆1,935Updated 2 weeks ago
- 服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件☆1,580Updated 2 years ago
- 一款基于BurpSuite的被动式shiro检测插件☆1,752Updated 2 years ago
- 【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022…☆1,200Updated 2 years ago
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新☆2,195Updated last year
- Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。☆1,977Updated last year
- netspy是一款快速探测内网可达网段工具(深信服深蓝实验室天威战队强力驱动)☆2,121Updated last year