记录安全方面的笔记/工具/漏洞合集
☆438May 14, 2025Updated last year
Alternatives and similar repositories for sec-note
Users that are interested in sec-note are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 各种数据库的利用姿势☆1,035Jan 3, 2025Updated last year
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新☆265Mar 30, 2022Updated 4 years ago
- appfinger(和风)是一款Http指纹管理工具~~~☆101Nov 7, 2022Updated 3 years ago
- WEB安全手册(红队安全技能栈)，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】☆1,924Updated this week
- 高危漏洞利用工具☆1,831Feb 12, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 各大漏洞文库合集☆756Oct 5, 2021Updated 4 years ago
- POC&EXP仓库、hvv弹药库、Nday、1day☆1,105Nov 11, 2022Updated 3 years ago
- 小型漏洞库，提供FOFA语法及批量脚本，具体利用法请参考别的漏洞库，共4种类型47项☆97Jul 31, 2021Updated 4 years ago
- 利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点☆2,366Jun 9, 2023Updated 3 years ago
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆240Nov 25, 2022Updated 3 years ago
- 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.☆2,150May 11, 2026Updated 2 months ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆450Jun 14, 2022Updated 4 years ago
- 一个既可以满足安服仔日常渗透工作也可以批量刷洞的工具盒子。集合了常见的域名收集、目录扫描、ip扫描、指纹扫描、PoC验证等常用工具，方便安服仔快速展开渗透测试☆534May 5, 2023Updated 3 years ago
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,145Jun 23, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 红队笔记☆2,168Mar 16, 2026Updated 4 months ago
- 红队|域渗透重要漏洞汇总(持续更新)☆292Dec 23, 2022Updated 3 years ago
- 红队常用命令速查☆1,025Mar 17, 2026Updated 4 months ago
- OA综合利用工具，集合将近20款OA漏洞批量扫描☆1,347Oct 28, 2023Updated 2 years ago
- shiro反序列化漏洞综合利用（仅限授权测试使用）☆2,606Jun 4, 2026Updated last month
- EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具☆3,500Apr 2, 2024Updated 2 years ago
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,056Oct 7, 2022Updated 3 years ago
- 数据库综合利用工具☆544Feb 16, 2022Updated 4 years ago
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新☆2,364Sep 12, 2023Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- 域渗透一条龙☆741Feb 16, 2022Updated 4 years ago
- 高危漏洞精准检测与深度利用框架☆1,464Jan 8, 2023Updated 3 years ago
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,479Apr 25, 2024Updated 2 years ago
- Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。☆1,282Apr 10, 2026Updated 3 months ago
- Poc and Exp☆1,246Dec 8, 2025Updated 7 months ago
- Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描☆1,122Sep 16, 2023Updated 2 years ago
- macOS上的小而美【Fofa、Shodan、Hunter、Zoomeye、Quake网络空间搜索引擎】闪电搜索器；GUI图形化(Mac/Windows)渗透测试信息搜集工具；资产搜集引擎；hw红队工具hvv☆667Dec 6, 2024Updated last year
- OAExploit一款基于产品的一键扫描工具。☆1,485Sep 20, 2022Updated 3 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆256Jul 12, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 一个攻防知识库。A knowledge base for red teaming and offensive security.☆4,281Jun 23, 2026Updated last month
- 记录实战中的各种sql注入绕过姿势☆665Sep 7, 2022Updated 3 years ago
- WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）☆1,793Nov 1, 2023Updated 2 years ago
- 自动化巡航扫描框架（可用于红队打点评估）☆743Feb 5, 2026Updated 5 months ago
- Java编写，Python作为辅助依赖的漏洞验证、利用工具，添加了进程查 找模块、编码模块、命令模块、常见漏洞利用GUI模块、shiro rememberMe解密模块，加快测试效率☆761Feb 25, 2024Updated 2 years ago
- 内存加载shellcode绕过waf☆207Jul 25, 2022Updated 4 years ago
- 基于Pocsuite3、goby编写的漏洞poc&exp存档☆883Apr 12, 2024Updated 2 years ago