此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现，POC已通过nuclei或xray武器化,绝大部分为自复现并自验过，本项目旨在为网络安全爱好者们提供一点参考资料，可供个人研究使用，共勉
☆311Aug 14, 2024Updated 2 years ago
Alternatives and similar repositories for 2024-PocLib
Users that are interested in 2024-PocLib are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。☆577Mar 21, 2024Updated 2 years ago
- DockerApiRCE☆241Oct 22, 2024Updated last year
- MDUT-Extend(扩展版本)☆946Aug 21, 2026Updated last week
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,927Aug 2, 2024Updated 2 years ago
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,074Dec 2, 2025Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 实战沉淀字典☆1,580Aug 16, 2026Updated 2 weeks ago
- 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！☆2,877Aug 23, 2024Updated 2 years ago
- 一个半自动化springboot打点工具，内置目前springboot所有漏洞☆791Sep 30, 2025Updated 11 months ago
- LC（List Cloud）是一个多云攻击面资产梳理工具☆649Oct 6, 2024Updated last year
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆576Apr 3, 2026Updated 4 months ago
- OneScan 是一款用于递归目录扫描的 BurpSuite 插件☆1,251Jun 24, 2025Updated last year
- 内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描☆479Nov 20, 2024Updated last year
- daydayExp的漏洞POC仓库，慢慢更新...☆380Nov 4, 2024Updated last year
- jeecg综合漏洞利用工具☆459Aug 30, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具☆369Aug 13, 2025Updated last year
- 攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口 过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。☆1,472Oct 3, 2024Updated last year
- 最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.☆1,057Jul 19, 2026Updated last month
- 面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams☆2,117Jul 28, 2026Updated last month
- 备份的漏洞库，3月开始我们来维护☆2,186Jul 13, 2026Updated last month
- P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步☆457Aug 5, 2025Updated last year
- java-web 自动化鉴权绕过☆379Apr 3, 2025Updated last year
- 综合漏洞后渗透利用工具☆1,786Dec 11, 2025Updated 8 months ago
- 泛微最近的漏洞利用工具（PS：2023）☆477Dec 14, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 基于 OPSEC 的 CobaltStrike 后渗透自动化链☆451Mar 11, 2024Updated 2 years ago
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆1,591Aug 23, 2026Updated last week
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆385Oct 29, 2025Updated 10 months ago
- tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含☆295Jun 16, 2026Updated 2 months ago
- NacosExploit 命令执行 内存马等利用☆218Jul 18, 2024Updated 2 years ago
- 收集最新漏洞POC（Yaml\Python）☆224Aug 19, 2025Updated last year
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,245Jul 12, 2024Updated 2 years ago
- 本工具为jeecg框架漏洞利用工具非jeecg-boot！☆183Aug 13, 2024Updated 2 years ago
- EHole(棱洞)魔改。可对路径进行指纹识别；支持识别出来的重点资产进行漏洞检测(支持从hunter和fofa中提取资产)支持对ftp服务识别及爆破☆971Mar 6, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Pillager是一个适用于后渗透期间的信息收集工具☆1,294Sep 7, 2024Updated last year
- 集权利用工具☆166Feb 28, 2025Updated last year
- 一款Java内存马生成、测 试工具，搭配@ax1sX的MemShell食用。☆267Feb 15, 2026Updated 6 months ago
- 一款集成了H3C,致远，泛微，万户，帆软，海康威视，金蝶云星空，畅捷通，Struts等多个RCE漏洞利用工具☆249Jul 28, 2024Updated 2 years ago
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆256Apr 29, 2025Updated last year
- Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件☆1,335Jul 10, 2026Updated last month
- 爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应☆767Jul 20, 2023Updated 3 years ago