云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。
☆61Oct 31, 2023Updated 2 years ago
Alternatives and similar repositories for cf-backup
Users that are interested in cf-backup are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 阿波罗钓鱼演练平台(ApolloFish)的网页钓鱼模板、邮箱钓鱼模板共享仓库。☆20Jan 20, 2026Updated 2 months ago
- 修改自SharpNoPSExec的基于python的横移工具 A Lateral Movement Tool Learned From SharpNoPSExec -- Twitter: @juliourena☆32May 8, 2021Updated 4 years ago
- 金蝶云星空 erp反序列化命令执行漏洞批量扫描POC&EXP，带命令回显☆33Jul 20, 2023Updated 2 years ago
- PHP文件上传50+绕过手法全景解析☆17Mar 16, 2025Updated last year
- 一个用友漏洞检测工具☆29May 15, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等☆583Aug 19, 2023Updated 2 years ago
- 内网综合扫描工具☆44Apr 16, 2024Updated last year
- 关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新☆141Apr 24, 2024Updated last year
- Linux 持久化工具：自动检测可持久化方式，目前支持ssh及crab持久化，无需依赖开箱即用☆25Oct 29, 2024Updated last year
- xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作，上传，job等相应操作。☆196Nov 25, 2023Updated 2 years ago
- OA系统解密小工具☆47Dec 10, 2023Updated 2 years ago
- AWS云平台 AccessKey 泄漏利用工具☆394Jul 18, 2023Updated 2 years ago
- 集权利用工具☆165Feb 28, 2025Updated last year
- xxl-job漏洞综合利用工具☆145Jun 3, 2025Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆50Oct 30, 2025Updated 4 months ago
- "chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability ru…☆484Feb 1, 2026Updated last month
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆376Oct 29, 2025Updated 4 months ago
- NacosExploit 命令执行 内存马等利用☆215Jul 18, 2024Updated last year
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆171Aug 9, 2023Updated 2 years ago
- LC（List Cloud）是一个多云攻击面资产梳理工具☆638Oct 6, 2024Updated last year
- this is my tools project ,welcome to start ...☆48Jul 18, 2023Updated 2 years ago
- Apache-backdoor Apache 中间件模块后门☆53Jan 10, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 复杂请求下的Shiro反序列化利用工具☆419Mar 12, 2024Updated 2 years ago
- 一款内网渗透常用命令的CS插件，解决记不住命令的苦恼！☆19Mar 10, 2022Updated 4 years ago
- xxl-job内存马☆227Jan 26, 2025Updated last year
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆555Feb 1, 2024Updated 2 years ago
- PoC of Spring AMQP Deserialization Vulnerability (CVE-2023-34050)☆13Jan 29, 2024Updated 2 years ago
- EWSTool是一个针对EXCHANGE邮件服务器的后渗透利用工具。使用ews接口，实现人员邮箱列表获取、搜索邮件、下载邮件等实用功能。☆65Mar 12, 2025Updated last year
- 子域名接管的几种变体靶场☆23Jun 22, 2024Updated last year
- 一款针对用友NC综合漏洞利用工具☆240Nov 27, 2023Updated 2 years ago
- 某 FE 平台一键漏洞探测工具，支持单 url 以及批量探测☆33Nov 11, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 子域名爆破，增加了智能爬虫功能☆70Mar 22, 2024Updated 2 years ago
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆180May 10, 2023Updated 2 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- 寻找可利用的白文件☆559Aug 18, 2025Updated 7 months ago
- JavaRce complements project - use RASP to prevent vulnerabilities☆24Apr 22, 2024Updated last year
- 此项目为su18大佬的仓库镜像，如有问题可发issuse删库☆84May 4, 2023Updated 2 years ago
- 在Java安全学习过程中的笔记和代码☆94Updated this week