orleven / Tentacle
Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
☆372Updated last year
Alternatives and similar repositories for Tentacle:
Users that are interested in Tentacle are comparing it to the libraries listed below
- An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability☆466Updated last year
- Weblogic IIOP CVE-2020-2551☆333Updated 5 years ago
- 用于漏洞排查的pocsuite3验证POC代码☆348Updated 2 years ago
- Cnvd-2020-10487 / cve-2020-1938, scanner tool☆293Updated 3 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆516Updated 4 years ago
- A list of useful payloads for Web Application Security and Pentest/CTF☆300Updated 8 months ago
- Redis 4.x/5.x RCE☆954Updated 3 years ago
- A collection of penetration testing related sites☆280Updated 4 years ago
- SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.☆430Updated 11 months ago
- Nmap&Zmap特征识别,绕过IDS探测☆325Updated 5 years ago
- CVE-2019-2725 命令回显☆438Updated last year
- Here you can find mostly all disclosed h1 reports☆348Updated 3 years ago
- ☆261Updated 4 years ago
- CVE-2020-5902 BIG-IP☆373Updated 3 years ago
- Gather sensitive information from (.idea) folder for pentesters☆361Updated 2 years ago
- 聚合空间测绘搜索(Fofa,Zoomeye,Quake,Shodan,Censys,BinaryEdge)☆341Updated 4 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆732Updated 3 years ago
- RedTeam资料收集整理☆328Updated 4 years ago
- Vulnerabilities of Goby supported with exploitation.☆721Updated last week
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持☆962Updated 10 months ago
- WebLogic wls9-async反序列化远程命令执行漏洞☆241Updated 5 years ago
- burpsuite extension for check unauthorized vulnerability☆231Updated 4 years ago
- Awesome webshell collection. Including 150 Github repo, and 200+ blog posts.☆170Updated 5 years ago
- Faster xss scanner,support reflected-xss and dom-xss☆446Updated last year
- Redis 4.x/5.x RCE☆541Updated 4 years ago
- Gosint is a distributed asset information collection and vulnerability scanning platform☆424Updated 2 years ago
- Default password scanner. 默认密码扫描器☆194Updated 4 years ago
- BurpBounty 魔改版本☆414Updated 3 years ago
- MySQL fake server for read files of connected clients☆596Updated 7 years ago
- Cobalt Strike team server password brute force tool☆392Updated 7 years ago