此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现，POC已通过nuclei或xray武器化,绝大部分为自复现并自验过，本项目旨在为网络安全爱好者们提供一点参考资料，可供个人研究使用，共勉
☆312Aug 14, 2024Updated last year
Alternatives and similar repositories for 2024-PocLib
Users that are interested in 2024-PocLib are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。☆578Mar 21, 2024Updated 2 years ago
- DockerApiRCE☆238Oct 22, 2024Updated last year
- MDUT-Extend(扩展版本)☆932Mar 27, 2026Updated 4 months ago
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,918Aug 2, 2024Updated last year
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,067Dec 2, 2025Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 实战沉淀字典☆1,573Mar 17, 2026Updated 4 months ago
- 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！☆2,876Aug 23, 2024Updated last year
- LC（List Cloud）是一个多云攻击面资产梳理工具☆650Oct 6, 2024Updated last year
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆573Apr 3, 2026Updated 3 months ago
- 一个半自动化springboot打点工具，内置目前springboot所有漏洞☆788Sep 30, 2025Updated 10 months ago
- OneScan 是一款用于递归目录扫描的 BurpSuite 插件☆1,254Jun 24, 2025Updated last year
- 内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描☆479Nov 20, 2024Updated last year
- daydayExp的漏洞POC仓库，慢慢更新...☆378Nov 4, 2024Updated last year
- jeecg综合漏洞利用工具☆455Aug 30, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具☆368Aug 13, 2025Updated 11 months ago
- 攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登 陆接口等。☆1,466Oct 3, 2024Updated last year
- 最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.☆1,054Jul 19, 2026Updated last week
- 面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams☆2,106Updated this week
- 备份的漏洞库，3月开始我们来维护☆2,108Jul 13, 2026Updated 2 weeks ago
- P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步☆454Aug 5, 2025Updated 11 months ago
- java-web 自动化鉴权绕过☆380Apr 3, 2025Updated last year
- 综合漏洞后渗透利用工具☆1,775Dec 11, 2025Updated 7 months ago
- 泛微最近的漏洞利用工具（PS：2023）☆478Dec 14, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Nuclei POC，每2小时更新 | 每日自动采集、验证、去重并发布 25 万+ 漏洞 PoC，保存已被删除的POC | 通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。☆2,114Updated this week
- 基于 OPSEC 的 CobaltStrike 后渗透自动化链☆451Mar 11, 2024Updated 2 years ago
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆1,551Updated this week
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆382Oct 29, 2025Updated 9 months ago
- tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含☆295Jun 16, 2026Updated last month
- NacosExploit 命令执行 内存马等利用☆218Jul 18, 2024Updated 2 years ago
- 收集最新漏洞POC（Yaml\Python）☆225Aug 19, 2025Updated 11 months ago
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,244Jul 12, 2024Updated 2 years ago
- 本工具为jeecg框架漏洞利用工具非jeecg-boot！☆184Aug 13, 2024Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- EHole(棱洞)魔改。可对路径进行指纹识别；支持识别出来的重点资产进行漏洞检测(支持从hunter和fofa中提取资产)支持对ftp服务识别及爆破☆969Mar 6, 2024Updated 2 years ago
- Pillager是一个适用于后渗透期间的信息收集工具☆1,289Sep 7, 2024Updated last year
- 集权利用工具☆165Feb 28, 2025Updated last year
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆265Feb 15, 2026Updated 5 months ago
- 一款集成了H3C,致远，泛微，万户，帆软，海康威视，金蝶云星空，畅捷通，Struts等多个RCE漏洞利用工具☆248Jul 28, 2024Updated 2 years ago
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆257Apr 29, 2025Updated last year
- Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件☆1,330Jul 10, 2026Updated 2 weeks ago