xss漏洞模糊测试payload的最佳集合 2020版
☆511May 25, 2020Updated 6 years ago
Alternatives and similar repositories for XSS_Cheat_Sheet_2020_Edition
Users that are interested in XSS_Cheat_Sheet_2020_Edition are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆867Jul 21, 2019Updated 7 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆725Mar 21, 2022Updated 4 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,181Nov 10, 2021Updated 4 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,395Jan 18, 2022Updated 4 years ago
- xray社区高级版证书生成，仅供学习研究，正常使用请支持正版。removed due to Chaitin requirements & support to version 1.4.4 & learning purpose☆442Nov 11, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Java RCE 回显测试代码☆1,008Oct 15, 2020Updated 6 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,014May 21, 2024Updated 2 years ago
- 红队作战中比较常遇到的一些重点系统漏洞整理。☆2,529Jul 17, 2021Updated 5 years ago
- 从wooyun中提取的payload，以及burp插件☆839Jun 17, 2022Updated 4 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆355Mar 12, 2020Updated 6 years ago
- SRC子域名资产监控☆1,292Jan 14, 2021Updated 5 years ago
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆214May 19, 2020Updated 6 years ago
- Shiro550/Shiro721 一键化利用工具，支持多种回显方式☆1,957Jun 4, 2021Updated 5 years ago
- 边界打点后的自动化渗透工具☆1,876Jul 19, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,682Mar 14, 2024Updated 2 years ago
- 通过 Redis 主从写出无损文件☆717May 25, 2020Updated 6 years ago
- 对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描☆907Dec 8, 2022Updated 3 years ago
- 一个全新的敏感文件发现工具☆225Jan 10, 2021Updated 5 years ago
- fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.☆228Oct 12, 2022Updated 4 years ago
- Burp suite 分块传输辅助插件☆2,025Feb 23, 2022Updated 4 years ago
- 2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。☆834Aug 24, 2019Updated 7 years ago
- 记录自己编写、修改的部分工具☆1,473Oct 19, 2025Updated last year
- 绕过专业工具检测的Webshell研究文章和免杀的Webshell☆1,738Nov 15, 2020Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,190Oct 17, 2023Updated 3 years ago
- ☆401Feb 28, 2020Updated 6 years ago
- MSSQL注入提权,bypass的一些总结☆738Jun 25, 2024Updated 2 years ago
- 免杀webshell无限生成工具☆1,277Apr 3, 2020Updated 6 years ago
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆709May 10, 2021Updated 5 years ago
- 一个简单的现代化公司域名使用规律预测及生成工具☆385Feb 24, 2022Updated 4 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持☆963Jun 16, 2024Updated 2 years ago
- Burp被动扫描流量转发插件☆1,461Jun 17, 2024Updated 2 years ago
- 内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~☆499Feb 13, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统☆1,524Nov 22, 2022Updated 3 years ago
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,407Dec 16, 2022Updated 3 years ago
- 用于记录分享一些有趣的案例☆867Jan 10, 2022Updated 4 years ago
- Shiro-550 不依赖CC链利用工具☆447Jun 19, 2024Updated 2 years ago
- 这是一个抓取浏览器密码的工具，后续会添加更多功能☆1,455May 21, 2022Updated 4 years ago
- PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist☆667Feb 24, 2021Updated 5 years ago
- 一键ThinkPHP漏洞检测☆1,156Nov 1, 2023Updated 3 years ago