pekita1 / SSTIF
一个Fuzzing服务器端模板注入漏洞的半自动化工具
☆16Updated 8 years ago
Alternatives and similar repositories for SSTIF:
Users that are interested in SSTIF are comparing it to the libraries listed below
- 利用递归，通过匹配网页源码里的子域内容收集所有的子域信息，可收集四级五级等多级子域名。☆33Updated 7 years ago
- 用于演示Java Web项目中，漏洞的成因及修复方案，可用于黑盒测试和白盒测试，部分修复方案可用于生产环境。☆43Updated 7 years ago
- 自用脚本 欢迎star☆23Updated 4 years ago
- vulhub-compose是一款屏蔽docker-compose的命令行工具，目的是降低火线平台社区用户使用vulhub靶场的难度，减少学习docker-compose的时间成本；同时，支持直接安装洞态IAST（原灵芝IAST）到vulhub靶场，用于漏洞复现、漏洞挖掘。☆46Updated 4 years ago
- Docker for vulnerability environment with web ui☆13Updated 6 years ago
- Xray 被动扫描管理☆57Updated 4 years ago
- Shiro RememberMe 1.2.4 反序列化 漏洞☆53Updated 5 years ago
- python3 写的一些权限维持脚本☆34Updated 5 years ago
- A Zhiyuan OA Collaborative Office Remote Code Execution Vulnerability on Windows☆36Updated 5 years ago
- Java 反序列化学习的实验代码 Java_deserialize_vuln_lab☆87Updated 6 years ago
- 一个Burpsuite插件，用于检测隐藏的XSS☆37Updated 6 years ago
- 资产扫描工具☆46Updated 4 years ago
- fastjson-1.2.61-RCE☆33Updated 5 years ago
- 一个可快速“搬运”cookie的Burp Suite插件☆25Updated 7 years ago
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆24Updated 5 years ago
- CVE-2019-12384 漏洞测 试环境☆20Updated 2 years ago
- autoType enable☆36Updated 5 years ago
- 从zoomeye or shodan or file 获取目标进行攻击。☆17Updated 5 years ago
- 可以直接反弹shell☆47Updated 2 years ago
- 泛微ecology OA系统接口存在数据库配置信息泄露漏洞☆49Updated 4 years ago
- 扫描常见未授权访问(改)（redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop）☆15Updated 4 years ago
- ☆41Updated 5 years ago
- A js encode/decode simple tool for XSS☆27Updated 5 years ago
- Apache Solr远程代码执行漏洞(CVE-2019-0193) Exploit☆64Updated 4 years ago
- 轻量级漏洞验证和利用框架☆32Updated 2 years ago
- 子域名后续的信息收集工具☆29Updated 5 years ago
- The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.☆20Updated 7 years ago
- fastjson_rce工具，不用搭建HTTP服务，不受JDK版本限制☆10Updated 5 years ago
- 子域名监控式漏扫☆42Updated 4 years ago
- 学习过程中做的一些小工具做个记录☆29Updated 2 years ago