收集、整理、修改互联网上公开的漏洞POC
☆972Jul 27, 2025Updated 8 months ago
Alternatives and similar repositories for vulnerability
Users that are interested in vulnerability are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.☆4,885Mar 23, 2026Updated last week
- OA综合利用工具,集合将近20款OA漏洞批量扫描☆1,339Oct 28, 2023Updated 2 years ago
- 一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webs…☆1,470Apr 25, 2024Updated last year
- Fastjson扫描器,可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,051Oct 7, 2022Updated 3 years ago
- 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.☆2,039Mar 23, 2026Updated last week
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- 梳理【护网高利用率POC】并集成Nuclei模板仓库,针对解决网上同一资产漏洞一键检测工具参次不齐问题。☆578Mar 21, 2024Updated 2 years ago
- 高危漏洞利用工具☆1,830Feb 12, 2025Updated last year
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新☆2,351Sep 12, 2023Updated 2 years ago
- 基于Pocsuite3、goby编写的漏洞poc&exp存档☆884Apr 12, 2024Updated last year
- daydayExp的漏洞POC仓库,慢慢更新...☆374Nov 4, 2024Updated last year
- WeblogicTool,GUI漏洞利用工具,支持漏洞检测、命令执行、内存马注入、密码解密等(深信服深蓝实验室天威战队强力驱动)☆1,779Nov 1, 2023Updated 2 years ago
- 利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点☆2,357Jun 9, 2023Updated 2 years ago
- WebSocket 内存马/Webshell,一种新型内存马/WebShell技术☆1,493Apr 10, 2023Updated 2 years ago
- OAExploit一款基于产品的一键扫描工具。☆1,480Sep 20, 2022Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Redis 漏洞利用工具☆939Jan 26, 2025Updated last year
- 自动整合全网Nuclei的漏洞POC,实时同步更新最新POC!☆2,893Aug 23, 2024Updated last year
- 一款支持自定义的 Java 内存马生成工具|A customizable Java in-memory webshell generation tool.☆2,166Aug 21, 2025Updated 7 months ago
- 高性能 HTTP 正向代理工具 | A high-performance http tunneling tool☆2,689Feb 2, 2026Updated last month
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆774Jan 26, 2022Updated 4 years ago
- 面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams☆2,035Feb 3, 2026Updated last month
- 各种数据库的利用姿势☆1,033Jan 3, 2025Updated last year
- netspy是一款快速探测内网可达网段工具(深信服深蓝实验室天威战队强力驱动)☆2,203Jul 25, 2023Updated 2 years ago
- 用于生成各类免杀webshell☆1,291Jan 8, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 侦查守卫(ObserverWard)的指纹库☆1,341Mar 23, 2026Updated last week
- 用友漏洞检测,持续更新漏洞检测模块☆479Jul 21, 2025Updated 8 months ago
- Spring漏洞综合利用工具☆674Jul 5, 2023Updated 2 years ago
- 收集的文章 https://mrwq.github.io/tools/paper/☆2,017Updated this week
- 用友NC系列漏洞检测利用工具,支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等☆585Aug 19, 2023Updated 2 years ago
- Fastjson姿势技巧集合☆1,835Oct 20, 2023Updated 2 years ago
- 极致攻防实验室 nuclei 检测 POC☆640Aug 1, 2023Updated 2 years ago
- 项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,900Jan 15, 2024Updated 2 years ago
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具☆2,015May 21, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- HeapDump敏感信息提取工具☆1,641Dec 15, 2025Updated 3 months ago
- 实战沉淀字典☆1,532Mar 17, 2026Updated last week
- 一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services☆1,806Nov 26, 2025Updated 4 months ago
- 基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具☆1,059Apr 23, 2023Updated 2 years ago
- 六大云存储,泄露利用检测工具☆1,247Mar 28, 2025Updated last year
- 一款基于各大企业信息API的工具,解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入☆4,264Jan 5, 2026Updated 2 months ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,115Feb 28, 2026Updated last month