域渗透工具
☆22Dec 24, 2019Updated 6 years ago
Alternatives and similar repositories for MS14-068
Users that are interested in MS14-068 are comparing it to the libraries listed below
Sorting:
- Wafid allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.☆10Oct 19, 2020Updated 5 years ago
- Apache OfBiz Auth Bypass Scanner for CVE-2023-51467☆11Dec 31, 2023Updated 2 years ago
- The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224☆14Jan 10, 2020Updated 6 years ago
- CVE-2022-22978 Spring-Security bypass Demo☆16Jun 2, 2022Updated 3 years ago
- CVE-2021-43798 Grafana 任意文件读取漏洞 POC+参数☆14Dec 17, 2021Updated 4 years ago
- ☆14Jul 18, 2022Updated 3 years ago
- 从入门到放弃的产物，学习过程中用python实现的一个单点c2基本功能☆11Mar 11, 2020Updated 5 years ago
- tp3注入总结☆19Jan 6, 2022Updated 4 years ago
- MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques☆14Dec 18, 2023Updated 2 years ago
- Phishing sender是一款针对钓鱼邮件应急演练所编写的小脚本，实际上是封装了swaks，让人们做演练的时候更加方便快捷。☆16Jun 8, 2022Updated 3 years ago
- awvs12统一面板管理多引擎Multi-engine，一键docker部署☆14Oct 24, 2019Updated 6 years ago
- This is just a simple data recovery for Foxmail(http://foxmail.com.cn/)☆18Oct 16, 2015Updated 10 years ago
- ☆77Jan 25, 2021Updated 5 years ago
- java web 压缩文件 安全 漏洞☆20Mar 17, 2020Updated 5 years ago
- 针对域名/页面的接口爬取，递归模式入库☆22Sep 18, 2019Updated 6 years ago
- Fastjson + MySQL 条件下不出网利用测试环境☆49Dec 6, 2025Updated 3 months ago
- 渗透测试中的python应用☆21Jul 25, 2016Updated 9 years ago
- OXID_Find by C++（多线程） 通过OXID解析器获取Windows远程主机上网卡地址☆89Jul 19, 2020Updated 5 years ago
- Bypass cobaltstrike beacon config scan☆84May 24, 2021Updated 4 years ago
- 创建一个克隆隐藏的管理员账号/Create a Clone Hidden Administrator Account☆22Aug 28, 2019Updated 6 years ago
- InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…☆31Dec 19, 2017Updated 8 years ago
- Event metadata collected across all manifest-based ETW providers on Window 10 1903☆32Nov 25, 2019Updated 6 years ago
- 组合利用泛微信息泄漏漏洞和任意用户登录漏洞，可获取全部loginId并测试登录☆59Aug 3, 2023Updated 2 years ago
- 攻防演练中防守方重点知识点整理，旨在方便平时看看，也在需要的时候有一个miniwiki☆30Jun 19, 2024Updated last year
- Exploit for WebSocket Vulnerability in Apache Tomcat☆169Nov 2, 2020Updated 5 years ago
- 个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。☆60Mar 25, 2020Updated 5 years ago
- 一个基于Electron的自动化Web资产探测工具，用于渗透前期的信息搜集工作☆28Jan 4, 2023Updated 3 years ago
- CVE-2022-46463(Harbor 未授权)☆30Jul 15, 2025Updated 7 months ago
- 解密DBeaver数据库软件保存的密码☆30Jul 31, 2023Updated 2 years ago
- My musings with C#☆28Dec 23, 2022Updated 3 years ago
- This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。☆120Jul 11, 2019Updated 6 years ago
- go shellcode 加载器☆67Aug 12, 2019Updated 6 years ago
- 蚁剑AES加密通信ASPX Webshell☆33Jul 13, 2021Updated 4 years ago
- Celestion 是一个无回显漏洞测试辅助平台，平台使用flask编写，提供DNSLOG，HTTPLOG等功能。 (界面懒得弄，后续有需要再说)。☆30Aug 24, 2023Updated 2 years ago
- 中国蚁剑JSP一句话Payload☆123Oct 4, 2020Updated 5 years ago
- 漏洞描述及修复-共享☆37Updated this week
- 一款基于ThinkPHP5.1的XSS管理平台。☆29Dec 6, 2022Updated 3 years ago
- CVE-2020-10199 回显版本☆31Jun 24, 2024Updated last year
- 使用免费支持微信模板消息推送的 PushPlus 进行上线主机提醒☆134Mar 6, 2023Updated 3 years ago