Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.
☆374Mar 6, 2024Updated 2 years ago
Alternatives and similar repositories for Tentacle
Users that are interested in Tentacle are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆726Mar 21, 2022Updated 4 years ago
- Bypass firewall for traffic forwarding using webshell☆1,429Sep 29, 2021Updated 4 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆358Mar 12, 2020Updated 6 years ago
- Python3编写的CMS漏洞检测框架☆1,447May 22, 2023Updated 2 years ago
- 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework☆1,949Mar 28, 2022Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- myscan 被动扫描☆664Mar 19, 2021Updated 5 years ago
- Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…☆932Jan 7, 2026Updated 3 months ago
- Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang☆572Jan 10, 2022Updated 4 years ago
- A powerful browser crawler for web vulnerability scanners☆3,031Mar 11, 2025Updated last year
- ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。☆1,638Jun 16, 2024Updated last year
- 内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~☆500Feb 13, 2020Updated 6 years ago
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…☆4,274Apr 4, 2021Updated 5 years ago
- bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统☆1,512Nov 22, 2022Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 资产扫描工具☆45Sep 1, 2020Updated 5 years ago
- 此项目用来提取收集以往泄露的密码中符合条件的强弱密码☆1,130Apr 1, 2019Updated 7 years ago
- A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或…☆675Jul 16, 2023Updated 2 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆518Jul 29, 2020Updated 5 years ago
- Watchdog是bayonet修改版，重新优化了数据库及web及扫描程序,加入多节点☆625Dec 8, 2022Updated 3 years ago
- 红队作战中比较常遇到的一些重点系统漏洞整理。☆2,520Jul 17, 2021Updated 4 years ago
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,393Dec 16, 2022Updated 3 years ago
- ☆14Jul 27, 2020Updated 5 years ago
- ☆1,386Jul 2, 2020Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability☆470Sep 16, 2023Updated 2 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆865Jul 21, 2019Updated 6 years ago
- 用于漏洞排查的pocsuite3验证POC代码☆347Aug 7, 2022Updated 3 years ago
- 🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)☆1,339Dec 8, 2022Updated 3 years ago
- 利用NTLM Hash读取Exchange邮件☆443Mar 23, 2026Updated last month
- Penetration Testing Platform☆1,349Jul 6, 2022Updated 3 years ago
- Venom - A Multi-hop Proxy for Penetration Testers☆2,157May 11, 2022Updated 3 years ago
- BCS（北京网络安全大会）2019 红队行动会议重点内容☆821Sep 4, 2019Updated 6 years ago
- Passive Security Scanner (被动式安全扫描器)☆1,948Feb 8, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 绕过专业工具检测的Webshell研究文章和免杀的Webshell☆1,733Nov 15, 2020Updated 5 years ago
- 通达OA 任意用户登录漏洞☆359Aug 27, 2020Updated 5 years ago
- SRCScan(submon) is a SRC assistant tool that periodically scans subdomains and requests WEB services on port 80/443 to check if it is ava…☆18Feb 26, 2021Updated 5 years ago
- PoCBox - Vulnerability Test Aid Platform☆962Mar 26, 2024Updated 2 years ago
- Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload☆895May 28, 2021Updated 4 years ago
- CobaltStrike后渗透测试插件☆1,564Oct 28, 2021Updated 4 years ago
- ☆286Jan 15, 2020Updated 6 years ago