此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现，POC已通过nuclei或xray武器化,绝大部分为自复现并自验过，本项目旨在为网络安全爱好者们提供一点参考资料，可供个人研究使用，共勉
☆309Aug 14, 2024Updated 2 years ago
Alternatives and similar repositories for 2024-PocLib
Users that are interested in 2024-PocLib are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。☆576Mar 21, 2024Updated 2 years ago
- DockerApiRCE☆239Oct 22, 2024Updated last year
- MDUT-Extend(扩展版本)☆951Aug 21, 2026Updated last month
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,935Aug 2, 2024Updated 2 years ago
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,073Dec 2, 2025Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！☆2,877Aug 23, 2024Updated 2 years ago
- 实战沉淀字典☆1,589Aug 16, 2026Updated last month
- 一个半自动化springboot打点工具，内置目前springboot所有漏洞☆792Sep 30, 2025Updated 11 months ago
- LC（List Cloud）是一个多云攻击面资产梳理工具☆647Oct 6, 2024Updated last year
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆574Sep 12, 2026Updated last week
- OneScan 是一款用于递归目录扫描的 BurpSuite 插件☆1,247Jun 24, 2025Updated last year
- 内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描☆477Nov 20, 2024Updated last year
- daydayExp的漏洞POC仓库，慢慢更新...☆379Nov 4, 2024Updated last year
- jeecg综合漏洞利用工具☆459Aug 30, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具☆368Aug 13, 2025Updated last year
- 攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。☆1,470Oct 3, 2024Updated last year
- 最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.☆1,065Jul 19, 2026Updated 2 months ago
- 面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams☆2,137Jul 28, 2026Updated last month
- P1finger - 红 队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步☆456Aug 5, 2025Updated last year
- 备份的漏洞库，3月开始我们来维护☆2,218Jul 13, 2026Updated 2 months ago
- java-web 自动化鉴权绕过☆379Apr 3, 2025Updated last year
- 综合漏洞后渗透利用工具☆1,781Dec 11, 2025Updated 9 months ago
- 泛微最近的漏洞利用工具（PS：2023）☆477Dec 14, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 基于 OPSEC 的 CobaltStrike 后渗透自动化链☆449Mar 11, 2024Updated 2 years ago
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆1,625Aug 23, 2026Updated 3 weeks ago
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆385Oct 29, 2025Updated 10 months ago
- tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含☆296Jun 16, 2026Updated 3 months ago
- NacosExploit 命令执行 内存马等利用☆217Jul 18, 2024Updated 2 years ago
- 收集最新漏洞POC（Yaml\Python）☆222Aug 19, 2025Updated last year
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,245Jul 12, 2024Updated 2 years ago
- 本工具为jeecg框架漏洞利用工具非jeecg-boot！☆180Aug 13, 2024Updated 2 years ago
- EHole(棱洞)魔改。可对路径进行指纹识别；支持识别出来的重点资产进行漏洞检测(支持从hunter和fofa中提取资产)支持对ftp服务识别及爆破☆974Mar 6, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Pillager是一个适用于后渗透期间的信息收集工具☆1,294Sep 7, 2024Updated 2 years ago
- 集权利用工具☆164Feb 28, 2025Updated last year
- 一款Java内存马生成、测试工具，搭 配@ax1sX的MemShell食用。☆265Feb 15, 2026Updated 7 months ago
- 一款集成了H3C,致远，泛微，万户，帆软，海康威视，金蝶云星空，畅捷通，Struts等多个RCE漏洞利用工具☆249Jul 28, 2024Updated 2 years ago
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆256Apr 29, 2025Updated last year
- Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件☆1,334Jul 10, 2026Updated 2 months ago
- 爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应☆767Jul 20, 2023Updated 3 years ago