kenuoseclab / LingZhi
灵芝IAST是一款交互式应用安全评估工具,覆盖了Java WEB相关安全风险的检测,具有近实时检测、准确率高、误报率低、漏洞链路清晰等特点|使用之前请阅读官方文档
☆16Updated 4 years ago
Alternatives and similar repositories for LingZhi:
Users that are interested in LingZhi are comparing it to the libraries listed below
- vulhub-compose是一款屏蔽docker-compose的命令行工具,目的是降低火线平台社区用户使用vulhub靶场的难度,减少学习docker-compose的时间成本;同时,支持直接安装洞态IAST(原灵芝IAST)到vulhub靶场,用于漏洞复现、漏洞挖掘。☆45Updated 3 years ago
- 潮涌web漏洞自动化挖掘平台——自动化扫描全网或特定范围web资产,之后获取指纹信息、爬取页面url并提炼,最后进行特定payload测试。☆50Updated 4 years ago
- 甲方企业安全建设开源之路☆10Updated 6 years ago
- 常用安全工具 docker镜像 自动更新仓库☆65Updated 2 years ago
- 子域名监控式漏扫☆42Updated 4 years ago
- Java RMI反序列化漏洞插件☆47Updated 3 years ago
- Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…☆85Updated 3 years ago
- AWVS12&AWVS13 通用API批量导入脚本 AWVS12 & AWVS13 common API batch import script.☆25Updated 2 years ago
- 基于SpringBoot编写的常见Web漏洞安全开发学习平台☆24Updated 3 years ago
- ☆41Updated 4 years ago
- 一个可以自定规则的动扫描器,支持主动和被动扫描☆24Updated 3 years ago
- 资产扫描工具☆46Updated 4 years ago
- 常见漏洞知识库文档☆50Updated 5 years ago
- Host scan:Host vulnerability scan主机漏洞扫描☆60Updated 3 years ago
- notes☆26Updated 2 years ago
- 👻inject_und3ad -- 蚁剑(AntSword)插件☆22Updated 5 years ago
- 一个代理扫描平台☆54Updated 4 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 4 years ago
- springFramework_CVE-2022-22965_RCE简单利用☆26Updated 2 years ago
- Use Fofa、shodan、zoomeye、360quake to collect information(e.g:domain,IP,CMS,OS)同时调用Fofa、shodan、zoomeye、360quake四个网络空间测绘API完成红队信息收集☆68Updated last year
- 一个以python3编写的的漏洞检测框架,可自定义,添加poc,exp,,不需要修改其他内容,只需要编写POC自动执行检测☆48Updated 4 years ago
- 一个自动挖掘漏洞的框架,日后会发展成强大的信息收集+漏洞挖掘脚本!☆24Updated 2 years ago
- [Red Team Information Gathering Tool] FOFA Host Details IP Port Protocol Website Component Layer Fingerprinting CMS Serialization Output …☆26Updated 9 months ago
- ThinkPHP各版本反序列 化利用代码☆32Updated 4 years ago
- 🐗 造轮子之子域名获取工具☆15Updated 2 years ago
- Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions suc…☆27Updated last year
- Pentest 收集、整理、分享☆46Updated 3 years ago
- xray社区高级版证书生成,支持到 1.2.0 版本☆35Updated 4 years ago
- 爆破js加密的后台登陆;JS加密;爆破密码;PyExecJS☆56Updated 4 years ago
- 整理一些利用pocsuite3编写的poc和exp☆15Updated 4 years ago