Lab for exploring SSRF vulnerabilities
☆248May 30, 2021Updated 5 years ago
Alternatives and similar repositories for ssrf-lab
Users that are interested in ssrf-lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo☆817Nov 28, 2022Updated 3 years ago
- ☆41Jul 23, 2018Updated 8 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆867Jul 21, 2019Updated 7 years ago
- My Real World CTF challenges☆115Sep 19, 2019Updated 7 years ago
- 更快速的进行Web应用指纹识别☆167May 9, 2019Updated 7 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- SSRF (Server Side Request Forgery) testing resources☆2,510Oct 12, 2024Updated 2 years ago
- Code-Audit-Challenges☆981Nov 17, 2018Updated 7 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,190Oct 17, 2023Updated 3 years ago
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆800Aug 21, 2023Updated 3 years ago
- 上传漏洞fuzz字典生成脚本☆1,278Apr 1, 2021Updated 5 years ago
- 跟踪真实漏洞相关靶场环境搭建☆239Jul 19, 2018Updated 8 years ago
- Redis 4.x/5.x RCE☆981Nov 30, 2021Updated 4 years ago
- a project aim to collect CTF web practices .☆679Feb 15, 2023Updated 3 years ago
- ☆139Apr 19, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- My CTF Challenges☆218Jan 4, 2026Updated 10 months ago
- 从wooyun中提取的payload，以及burp插件☆839Jun 17, 2022Updated 4 years ago
- CVE-2019-2725 命令回显☆432May 8, 2023Updated 3 years ago
- RedTeam资料收集整理☆327Dec 10, 2020Updated 5 years ago
- Java漏洞练习程序，开发工具Eclipse，运行环境Java 1.7以上版本，Tocmat7以上。☆54Oct 25, 2018Updated 8 years ago
- Reference：https://www.w2n1ck.com/article/44/☆156Mar 7, 2020Updated 6 years ago
- A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或…☆674Jul 16, 2023Updated 3 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,181Nov 10, 2021Updated 4 years ago
- flash 劫持轮子，CSRF，劫持，跳转，swf 有需求可以提issues ，src挖掘,劫持response☆86Nov 9, 2019Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Multi-language web CGI interfaces exploits.☆394Aug 22, 2022Updated 4 years ago
- web模糊测试 - 将漏洞可能性放大☆143Apr 23, 2019Updated 7 years ago
- 通过BurpSuite来构建自己的爆破字典，可以通过字典爆破来发现隐藏资产。☆499Jan 30, 2024Updated 2 years ago
- 越权检测工具☆742May 31, 2026Updated 5 months ago
- SRC子域名资产监控☆1,290Jan 14, 2021Updated 5 years ago
- Python2编写的struts2漏洞全版本检测和利用工具☆1,409May 7, 2019Updated 7 years ago
- dynamic crawler for web vulnerability scanner☆250Mar 15, 2026Updated 7 months ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆517Jul 29, 2020Updated 6 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆169Apr 5, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- dockers for CTF_Web.☆203Nov 22, 2022Updated 3 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持☆964Jun 16, 2024Updated 2 years ago
- WebLogic wls9-async反序列化远程命令执行漏洞☆238May 26, 2019Updated 7 years ago
- MSSQL注入提权,bypass的一些总结☆738Jun 25, 2024Updated 2 years ago
- RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl☆208Mar 10, 2019Updated 7 years ago
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆215Aug 17, 2017Updated 9 years ago
- Dockerfile for hitcon☆52Nov 3, 2018Updated 8 years ago