渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……
☆85Jun 25, 2018Updated 8 years ago
Alternatives and similar repositories for penetration
Users that are interested in penetration are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 爆破字典☆16Nov 15, 2017Updated 8 years ago
- 用于记录分享一些有趣的案例☆868Jan 10, 2022Updated 4 years ago
- 此项目用来提取收集以往泄露的密码中符合条件的强弱密码☆1,127Apr 1, 2019Updated 7 years ago
- 漏洞利用，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），上传冰蝎3，getshell☆11Mar 1, 2021Updated 5 years ago
- ☆14Feb 2, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Search Assistant: Searching shodan via API.☆65Dec 18, 2018Updated 7 years ago
- Shellcode launcher utility☆478Feb 16, 2014Updated 12 years ago
- 个人域渗透学习笔记☆1,806Feb 7, 2020Updated 6 years ago
- 一个定制自己渗透测试的python框架☆14Jun 10, 2021Updated 5 years ago
- 致远OA漏洞验证☆20Jun 26, 2019Updated 7 years ago
- burpsuite插件-被动无感识别指纹-主动poc扫描☆26Sep 13, 2024Updated last year
- office-exploits Office漏洞集合 https://www.sec-wiki.com☆421Jan 17, 2019Updated 7 years ago
- Office Anywhere网络智能办公系统☆152Mar 20, 2020Updated 6 years ago
- K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…☆6,197Jan 25, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Web端POC-EXP 整理☆98Apr 8, 2021Updated 5 years ago
- 在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..☆1,788Mar 31, 2023Updated 3 years ago
- 一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。☆1,009Jun 22, 2020Updated 6 years ago
- 2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~☆4,611Feb 24, 2023Updated 3 years ago
- 轻量端口扫描器、信息泄露扫描、批量网站备份扫描☆42Apr 21, 2018Updated 8 years ago
- thinkphp v5.x 远程代码执行漏洞-POC集合☆1,193Jan 15, 2019Updated 7 years ago
- 对密文的加密类型进行判断的命令行工具。☆61Jun 21, 2019Updated 7 years ago
- Burpsuite-Plugins-Usage☆520Mar 28, 2026Updated 4 months ago
- pocsuite☆11Apr 21, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆1,833Nov 24, 2025Updated 8 months ago
- 超级弱口令检查工具是一款Windows平台的弱口 令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。☆2,740Jul 29, 2020Updated 6 years ago
- 林中有两条路，我选择了人迹罕至的一条☆34May 31, 2022Updated 4 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆724Mar 21, 2022Updated 4 years ago
- 红队作战中比较常遇到的一些重点系统漏洞整理。☆2,523Jul 17, 2021Updated 5 years ago
- Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…☆4,291Apr 4, 2021Updated 5 years ago
- 一款python编写的轻量级弱口令检测脚本，目前支持以下服务：FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。☆144Nov 21, 2023Updated 2 years ago
- You Know, For WEB Fuzzing !☆8,418Nov 13, 2023Updated 2 years ago
- tp3注入总结☆19Jan 6, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- couchdb remote command exec.☆14Mar 27, 2018Updated 8 years ago
- Struts2全漏洞扫描利用工具☆2,221Jul 12, 2021Updated 5 years ago
- CMS漏洞测试用例集合☆1,765Dec 20, 2018Updated 7 years ago
- Shiro<=1.2.4反序列化，一键检测工具☆978Mar 4, 2021Updated 5 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,019May 21, 2024Updated 2 years ago
- Golang:采用随机deskey和hex进行文件加密，常用于加密shellcode.☆12May 16, 2021Updated 5 years ago
- 应急响应实战笔记，一个安全工程师的自我修养。☆5,558Jun 26, 2023Updated 3 years ago