收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了900多个poc/exp，长期更新。
☆42Jun 13, 2025Updated 8 months ago
Alternatives and similar repositories for POC2
Users that are interested in POC2 are comparing it to the libraries listed below
Sorting:
- ☆16Apr 17, 2024Updated last year
- VulnArk - 漏洞管理平台☆42Jun 19, 2025Updated 8 months ago
- 一个基于 Tauri + Next.js 构建的现代化风险隐患报告管理与生成应用，专为网络安全评估、系统安全审计等场景设计。☆19Jun 26, 2025Updated 8 months ago
- 这个人很懒什么也不想说☆29Jul 11, 2025Updated 7 months ago
- 漏洞文库☆21Feb 1, 2024Updated 2 years ago
- 基于 Docker 开发的：在线漏洞靶场。☆20Aug 18, 2022Updated 3 years ago
- burp手工检测fastjson辅助☆88Mar 4, 2024Updated last year
- 🔥🔥🔥持续更新的特征库. 2023hw☆21Oct 8, 2023Updated 2 years ago
- 新免杀方向 Mimikatz（猕猴桃） 免杀 360，火绒，电脑管家，WindowsDefinder，详细使用教程请参考博客：https://www.vpss.cc/381.html☆25Mar 4, 2024Updated last year
- Vulnerability POC/EXP Collection and Classification☆23Sep 18, 2024Updated last year
- 基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell☆21Dec 6, 2021Updated 4 years ago
- 备份的漏洞库，3月开始我们来维护☆1,803Dec 11, 2025Updated 2 months ago
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆163Jul 8, 2025Updated 7 months ago
- 一种收集敏感信息的Burp插件☆31Sep 2, 2022Updated 3 years ago
- xia Jie (瞎解) burp 插件 数据包 加解密 ，对burp的请求包和响应包用python完全自定义修改流量☆69Sep 10, 2024Updated last year
- 综合后渗透方面的杂烩☆575Apr 22, 2025Updated 10 months ago
- js主动参数提取与构造工具☆78Dec 22, 2025Updated 2 months ago
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆570Feb 7, 2026Updated 3 weeks ago
- Struts2框架全系列漏洞扫 描工具 / Code By:Jun_sheng☆35Jul 8, 2022Updated 3 years ago
- vshell 是一款go编写的主机管理工具，使用蚁剑控制台及插件管理主机 vshell is a Remote Administation tool written in Go (RAT),use AntSword control host☆30Dec 5, 2023Updated 2 years ago
- 若依后台定时任务一键利用☆75Apr 14, 2022Updated 3 years ago
- JSHack Version One☆10Oct 19, 2025Updated 4 months ago
- 存储桶遍历漏洞利用工具☆418Jul 25, 2024Updated last year
- 一款基于污点分析的PHP扫描工具，能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径，同时支持单独对函数的扫描。☆167Apr 10, 2025Updated 10 months ago
- 解析netsh抓取的etl文件来定位windows主机上存在ICMP通信的进程与文件的小工具☆31Apr 22, 2022Updated 3 years ago
- 革命性的CTF工具，为快速、简便而生。☆30Dec 30, 2024Updated last year
- Java内存马教程☆122Jul 8, 2025Updated 7 months ago
- Burp插件，自动化挖掘SSRF，Redirect，Sqli漏洞，自定义匹配参数☆451Sep 10, 2023Updated 2 years ago
- VY-netcat is a network tool written based on vlang language, which is mainly used for building CTF problem environment, and will be integ…☆10Oct 20, 2024Updated last year
- 全集成式，批量漏洞扫描神器☆34Mar 8, 2024Updated last year
- CVE-2021-22192 靶场： 未授权用户 RCE 漏洞☆36Jan 24, 2023Updated 3 years ago
- Java Vulnerability Exploitation Platform☆1,985Jan 6, 2026Updated last month
- 2024高校网络安全管理运维赛 附件归档 OMCTF2024（operation and maintenance）☆41May 12, 2024Updated last year
- 内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具☆360Aug 13, 2025Updated 6 months ago
- (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.☆51May 22, 2025Updated 9 months ago
- CVE-2024-23897 - Jenkins 任意文件读取 利用工具☆87Mar 16, 2024Updated last year
- 基于爬虫工具批量暗链检查、敏感信息泄露、敏感关键字检查。☆88May 23, 2023Updated 2 years ago
- 2024 HVV情报速递~☆155Aug 6, 2024Updated last year
- OneScan 是一款用于递归目录扫描的 BurpSuite 插件☆1,230Jun 24, 2025Updated 8 months ago