云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。
☆64Oct 31, 2023Updated 2 years ago
Alternatives and similar repositories for cf-backup
Users that are interested in cf-backup are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PHP文件上传50+绕过手法全景解析☆18Mar 16, 2025Updated last year
- 金蝶云星空 erp反序列化命令执行漏洞批量扫描POC&EXP，带命令回显☆34Jul 20, 2023Updated 3 years ago
- 一个用友漏洞检测工具☆29May 15, 2024Updated 2 years ago
- 用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等☆598Aug 19, 2023Updated 2 years ago
- 内网综合扫描工具☆42Apr 16, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新☆149Apr 24, 2024Updated 2 years ago
- xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作，上传，job等相应操作。☆195Nov 25, 2023Updated 2 years ago
- Linux 持久化工具：自动检测可持久化方式，目前支持ssh及crab持久化，无需依赖开箱即用☆26Oct 29, 2024Updated last year
- 将传统的k8s攻击手法进行整合，融入cdk的相关exp，接入llm并提供attack接口完成k8s自动化渗透。☆30Jul 12, 2026Updated last month
- ApolloLnk 是一款功能强大的 Windows LNK 快捷方式生成工具，支持参数隐藏、图标伪造、文件打包等多种高级功能，适用于安全研究、渗透测试等场景。☆43Jan 12, 2026Updated 7 months ago
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆289Nov 20, 2023Updated 2 years ago
- OA系统解密小工具☆47Dec 10, 2023Updated 2 years ago
- AWS云平台 AccessKey 泄漏利用工具☆397Jul 18, 2023Updated 3 years ago
- "chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability ru…☆489Feb 1, 2026Updated 6 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 使用JAVAFX写了一个Thinkphp的GUI漏洞检测利用工具☆129Aug 10, 2025Updated last year
- JavaRce complements project - use RASP to prevent vulnerabilities☆25Apr 22, 2024Updated 2 years ago
- NacosExploit 命令执行 内存马等利用☆218Jul 18, 2024Updated 2 years ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆172Aug 9, 2023Updated 3 years ago
- 后渗透信息/密码/凭证收集工具☆308May 7, 2025Updated last year
- 万户数据库解密☆21Dec 3, 2023Updated 2 years ago
- LC（List Cloud）是一个多云攻击面资产梳理工具☆650Oct 6, 2024Updated last year
- EWSTool是一个针对EXCHANGE邮件服务器的后渗透利用工具。使用ews接口，实现人员邮箱列表获取、搜索邮件、下载邮件等实用功能。☆64Mar 12, 2025Updated last year
- Apache-backdoor Apache 中间件模块后门☆53Jan 10, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆384Oct 29, 2025Updated 9 months ago
- 复杂请求下的Shiro反序列化利用工具☆422Mar 12, 2024Updated 2 years ago
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆566Feb 1, 2024Updated 2 years ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,575Aug 8, 2026Updated last week
- 某 FE 平台一键漏洞探测工具，支持单 url 以及批量探测☆33Nov 11, 2024Updated last year
- PoC of Spring AMQP Deserialization Vulnerability (CVE-2023-34050)☆13Jan 29, 2024Updated 2 years ago
- 一款针对用友NC综合漏洞利用工具☆243Nov 27, 2023Updated 2 years ago
- 辅助甲方安全人员巡检网站资产，发现 并分析API安全问题☆535Jan 20, 2025Updated last year
- xxl-job内存马☆233Jan 26, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 子域名接管的几种变体靶场☆22Jun 22, 2024Updated 2 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆608Aug 5, 2026Updated last week
- 一款内网渗透常用命令的CS插件，解决记不住命令的苦恼！☆19Mar 10, 2022Updated 4 years ago
- 子域名爆破，增加了智能爬虫功能☆70Mar 22, 2024Updated 2 years ago
- MySQL_Fake_Server-啄木鸟yso适配版☆46Sep 20, 2024Updated last year
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆188May 10, 2023Updated 3 years ago
- 寻找可利用的白文件☆563Aug 18, 2025Updated 11 months ago