渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……
☆86Jun 25, 2018Updated 8 years ago
Alternatives and similar repositories for penetration
Users that are interested in penetration are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 爆破字典☆16Nov 15, 2017Updated 8 years ago
- 用于记录分享一些有趣的案例☆868Jan 10, 2022Updated 4 years ago
- 此项目用来提取收集以往泄露的密码中符合条件的强弱密码☆1,127Apr 1, 2019Updated 7 years ago
- 漏洞利用，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），上传冰蝎3，getshell☆11Mar 1, 2021Updated 5 years ago
- ☆14Feb 2, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Search Assistant: Searching shodan via API.☆64Dec 18, 2018Updated 7 years ago
- Shellcode launcher utility☆478Feb 16, 2014Updated 12 years ago
- 个人域渗透学习笔记☆1,805Feb 7, 2020Updated 6 years ago
- 致远OA漏洞验证☆20Jun 26, 2019Updated 7 years ago
- 一个定制自己渗透测试的python框架☆14Jun 10, 2021Updated 5 years ago
- burpsuite插件-被动无感识别指纹-主动poc扫描☆26Sep 13, 2024Updated 2 years ago
- office-exploits Office漏洞集合 https://www.sec-wiki.com☆421Jan 17, 2019Updated 7 years ago
- Office Anywhere网络智能办公系统☆152Mar 20, 2020Updated 6 years ago
- K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…☆6,224Jan 25, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Web端POC-EXP 整理☆98Apr 8, 2021Updated 5 years ago
- 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..☆1,784Mar 31, 2023Updated 3 years ago
- 一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。☆1,008Jun 22, 2020Updated 6 years ago
- 2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~☆4,617Feb 24, 2023Updated 3 years ago
- 轻量端口扫描器、信息泄露扫描、批量网站备份扫描☆42Apr 21, 2018Updated 8 years ago
- thinkphp v5.x 远程代码执行漏洞-POC集合☆1,193Jan 15, 2019Updated 7 years ago
- 对密文的加密类型进行判断的命令行工具。☆61Jun 21, 2019Updated 7 years ago
- Burpsuite-Plugins-Usage☆520Mar 28, 2026Updated 6 months ago
- pocsuite☆11Apr 21, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆1,837Nov 24, 2025Updated 10 months ago
- 超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱 密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。☆2,747Jul 29, 2020Updated 6 years ago
- 林中有两条路，我选择了人迹罕至的一条☆33May 31, 2022Updated 4 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆725Mar 21, 2022Updated 4 years ago
- 红队作战中比较常遇到的一些重点系统漏洞整理。☆2,524Jul 17, 2021Updated 5 years ago
- Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…☆4,294Apr 4, 2021Updated 5 years ago
- 一款python编写的轻量级弱口令检测脚本，目前支持以下服务：FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。☆144Nov 21, 2023Updated 2 years ago
- You Know, For WEB Fuzzing !☆8,446Nov 13, 2023Updated 2 years ago
- tp3注入总结☆19Jan 6, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- couchdb remote command exec.☆14Mar 27, 2018Updated 8 years ago
- Struts2全漏洞扫描利用工具☆2,217Jul 12, 2021Updated 5 years ago
- CMS漏洞测试用例集合☆1,767Dec 20, 2018Updated 7 years ago
- Shiro<=1.2.4反序列化，一键检测工具☆978Mar 4, 2021Updated 5 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,019May 21, 2024Updated 2 years ago
- Golang:采用随机deskey和hex进行文件加密，常用于加密shellcode.☆12May 16, 2021Updated 5 years ago
- 应急响应实战笔记，一个安全工程师的自我修养。☆5,565Jun 26, 2023Updated 3 years ago