web模糊测试 - 将漏洞可能性放大
☆145Apr 23, 2019Updated 6 years ago
Alternatives and similar repositories for WebFuzzAttack
Users that are interested in WebFuzzAttack are comparing it to the libraries listed below
Sorting:
- 更快速的进行Web应用指纹识别☆170May 9, 2019Updated 6 years ago
- 基于burpsuite headless 的代理式被动扫描系统☆95Feb 10, 2020Updated 6 years ago
- dynamic crawler for web vulnerability scanner☆252Mar 4, 2020Updated 5 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现,集合了mock、httplog、dns tools、xss,可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- fastjson 1.2.68 版本 autotype bypass☆142Jun 17, 2022Updated 3 years ago
- tomcat使用了自带session同步功能时,不安全的配置(没有使用EncryptInterceptor)导致存在的反序列化漏洞,通过精心构造的数据包, 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484,9484…☆212May 19, 2020Updated 5 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆167Apr 5, 2019Updated 6 years ago
- A Java runtime information-gathering tool which uses the Java Attach API for information acquisition☆204Apr 26, 2021Updated 4 years ago
- python webanalyzer☆147Jun 2, 2021Updated 4 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆728Mar 21, 2022Updated 3 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,198Oct 17, 2023Updated 2 years ago
- ☆131Jun 17, 2022Updated 3 years ago
- 用于记录分享一些有趣的案例☆866Jan 10, 2022Updated 4 years ago
- Airbug(空气洞),收集漏洞poc用于安全产品☆354Sep 26, 2019Updated 6 years ago
- Shiro RCE (Padding Oracle Attack)☆148Nov 15, 2019Updated 6 years ago
- 网页相似度判断:根据网页结构判断页面相似性 ,可用于相似度计算、越权检测等(Determine page similarity based on HTML page structure)☆282Jul 27, 2019Updated 6 years ago
- a simple tool to detect potential security threat in php code☆316Sep 9, 2024Updated last year
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆125Jul 17, 2020Updated 5 years ago
- ☆404Feb 28, 2020Updated 6 years ago
- 漏洞测试环境 - 方便写扫描器利用复现☆27Aug 12, 2019Updated 6 years ago
- flash 劫持轮子,CSRF,劫持,跳转,swf 有需求可以提issues ,src挖掘,劫持response☆86Nov 9, 2019Updated 6 years ago
- One CTF Platform☆20Dec 4, 2019Updated 6 years ago
- A list of useful payloads for Web Application Security and Pentest/CTF☆312Aug 14, 2024Updated last year
- 漏洞利用框架模块分享仓库☆348Oct 8, 2019Updated 6 years ago
- CVE-2019-2725 命令回显☆436May 8, 2023Updated 2 years ago
- 从shodan获取使用了相同favicon.ico的网站☆189Feb 16, 2019Updated 7 years ago
- ☆743Nov 20, 2019Updated 6 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- 为应对CTF比赛而搭建的各种环境☆154May 9, 2020Updated 5 years ago
- mysql注入,bypass的一些心得☆1,326Jun 25, 2024Updated last year
- WeblogicScanLot系列,Weblogic漏洞批量检测工具,V2.2☆184Aug 1, 2020Updated 5 years ago
- 注入检测工具☆44Aug 12, 2019Updated 6 years ago
- ☆119Mar 21, 2020Updated 5 years ago
- 参考《利用分块传输吊打所有WAF》修改的requests的Adapter☆98Jan 31, 2019Updated 7 years ago
- 通用的指纹识别规则☆371Dec 2, 2022Updated 3 years ago
- RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl☆210Mar 10, 2019Updated 6 years ago
- Apache Solr Injection Research☆579Jan 28, 2020Updated 6 years ago
- CMS和中间件指纹库☆399Apr 30, 2019Updated 6 years ago
- 渗透测试用到的东东☆428May 6, 2020Updated 5 years ago