此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现，POC已通过nuclei或xray武器化,绝大部分为自复现并自验过，本项目旨在为网络安全爱好者们提供一点参考资料，可供个人研究使用，共勉
☆306Aug 14, 2024Updated 2 years ago
Alternatives and similar repositories for 2024-PocLib
Users that are interested in 2024-PocLib are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。☆577Mar 21, 2024Updated 2 years ago
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,947Aug 2, 2024Updated 2 years ago
- MDUT-Extend(扩展版本)☆953Aug 21, 2026Updated 2 months ago
- 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！☆2,874Aug 23, 2024Updated 2 years ago
- daydayExp的漏洞POC仓库，慢慢更新...☆379Nov 4, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- DockerApiRCE☆241Oct 22, 2024Updated 2 years ago
- 内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描☆478Nov 20, 2024Updated last year
- 实战沉淀字典☆1,595Sep 28, 2026Updated last month
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆574Sep 12, 2026Updated last month
- 备份的漏洞库，3月开始我们来维护☆2,261Oct 20, 2026Updated last week
- 面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams☆2,151Jul 28, 2026Updated 3 months ago
- 最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.☆1,067Jul 19, 2026Updated 3 months ago
- 综合漏洞后渗透利用工具☆1,790Dec 11, 2025Updated 10 months ago
- OneScan 是一款用于递归目录扫描的 BurpSuite 插件☆1,245Jun 24, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- LC（List Cloud）是一个多云攻击面资产梳理工具☆652Oct 6, 2024Updated 2 years ago
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,074Dec 2, 2025Updated 11 months ago
- jeecg综合漏洞利用工具☆459Aug 30, 2024Updated 2 years ago
- 攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。☆1,471Oct 3, 2024Updated 2 years ago
- 基于 OPSEC 的 CobaltStrike 后渗透自动化链☆447Mar 11, 2024Updated 2 years ago
- 一个半自动化springboot打点工具，内置目前springboot所有漏洞☆790Sep 30, 2025Updated last year
- P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步☆466Sep 27, 2026Updated last month
- 内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具☆369Aug 13, 2025Updated last year
- 泛微最近的漏洞利用工具（PS：2023）☆477Dec 14, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆385Oct 29, 2025Updated last year
- Pillager是一个适用于后渗透期间的信息收集工具☆1,296Sep 7, 2024Updated 2 years ago
- 收集最新漏洞POC（Yaml\Python）☆223Aug 19, 2025Updated last year
- 集权利用工具☆166Feb 28, 2025Updated last year
- 一个想让你测试加密流量像测试明文一样简单高 效的 Burp 插件。 A Burp plugin that makes testing encrypted traffic as simple and efficient as testing plaintext.☆1,103Aug 24, 2026Updated 2 months ago
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,250Jul 12, 2024Updated 2 years ago
- EHole(棱洞)魔改。可对路径进行指纹识别；支持识别出来的重点资产进行漏洞检测(支持从hunter和fofa中提取资产)支持对ftp服务识别及爆破☆973Mar 6, 2024Updated 2 years ago
- 一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.☆5,238May 11, 2026Updated 5 months ago
- DecryptTools-综合解密☆1,328Mar 2, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- java-web 自动化鉴权绕过☆380Apr 3, 2025Updated last year
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆568Feb 1, 2024Updated 2 years ago
- 辅助甲方安全人员巡检网站资产，发现并分析API安全问题☆532Jan 20, 2025Updated last year
- NacosExploit 命令执行 内存马等利用☆220Jul 18, 2024Updated 2 years ago
- 支持自定义Poc文件的图形化漏洞利用工具☆235Nov 5, 2024Updated last year
- 猫蛋儿安全团队编写的poc能报就能打。企业微信、海康、Metabase、Openfire、泛微OA......☆586Apr 9, 2024Updated 2 years ago
- 高性能 HTTP 正向代理工具 | A high-performance http tunneling tool☆2,844Jul 14, 2026Updated 3 months ago