scanfsec/penetration external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

scanfsec/penetration

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/scanfsec/penetration)

Close

scanfsec / penetrationView on GitHubMore

• External links
• Readme badge

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

☆114Jun 25, 2018Updated 7 years ago

Alternatives and similar repositories for penetration

Users that are interested in penetration are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• jas502n / phpweb

  View on GitHub
  phpweb 前台任意文件上传
  ☆16Jan 9, 2020Updated 6 years ago
• threedr3am / fastjson-blacklist

  View on GitHub
  打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
  ☆32Jan 3, 2020Updated 6 years ago
• AlphabugX / port_tunnel

  View on GitHub
  这个工具只是临时名称，我称他为端口隧道技术，解决隔离内网上线问题。
  ☆78May 31, 2022Updated 3 years ago
• Macr0phag3 / webshell-bypassed-human

  View on GitHub
  过人 webshell 的生成工具
  ☆262Apr 23, 2025Updated 11 months ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆450Jun 19, 2024Updated last year
• 1120362990 / vulnerability-list

  View on GitHub
  在渗透测试中快速检测常见中间件、组件的高危漏洞。
  ☆728Mar 21, 2022Updated 4 years ago
• lufeirider / BypassShell

  View on GitHub
  anti AV
  ☆291Mar 12, 2020Updated 6 years ago
• r0eXpeR / supplier

  View on GitHub
  主流供应商的一些攻击性漏洞汇总
  ☆808Nov 8, 2021Updated 4 years ago
• DeEpinGh0st / Mysqlmonitor

  View on GitHub
  Mysql数据库执行监控
  ☆12Dec 10, 2019Updated 6 years ago
• we1h0 / web-sec-interview

  View on GitHub
  Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路
  ☆479Jul 25, 2019Updated 6 years ago
• KpLi0rn / ysoserial

  View on GitHub
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Sep 14, 2021Updated 4 years ago
• DSO-Lab / pocscan

  View on GitHub
  ☆115Jan 21, 2021Updated 5 years ago
• zilong3033 / fastjsonScan

  View on GitHub
  fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。
  ☆125May 14, 2021Updated 4 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,405Jan 18, 2022Updated 4 years ago
• rufherg / WebLogic_Basic_Poc

  View on GitHub
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆94Nov 4, 2020Updated 5 years ago
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,033Jan 3, 2025Updated last year
• Sakurasan / scf-proxy

  View on GitHub
  云函数代理服务
  ☆419Jun 6, 2025Updated 9 months ago
• yaunsky / passToJs

  View on GitHub
  爆破js加密的后台登陆；JS加密；爆破密码；PyExecJS
  ☆55Jan 20, 2021Updated 5 years ago
• woodpecker-appstore / weblogic-infodetector

  View on GitHub
  woodpecker框架weblogic信息探测插件
  ☆185Mar 23, 2022Updated 4 years ago
• XTeam-Wing / RedTeaming2020

  View on GitHub
  RedTeaming知识星球2020年安全知识汇总
  ☆473May 5, 2021Updated 4 years ago
• dr0op / WeblogicScan

  View on GitHub
  增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持
  ☆967Jun 16, 2024Updated last year
• MountCloud / BehinderClientSource

  View on GitHub
  ❄️冰蝎客户端源码-V4.0.6🔞
  ☆941Jul 8, 2025Updated 8 months ago
• czz1233 / GBByPass

  View on GitHub
  冰蝎 哥斯拉 WebShell bypass
  ☆763Jan 15, 2026Updated 2 months ago
• sp4zcmd / WeblogicExploit-GUI

  View on GitHub
  Weblogic漏洞利用图形化工具 支持注入内存马、一键上传webshell、命令执行
  ☆775Apr 20, 2022Updated 3 years ago
• pmiaowu / BurpFastJsonScan

  View on GitHub
  一款基于BurpSuite的被动式FastJson检测插件
  ☆1,237Oct 1, 2022Updated 3 years ago
• Wrong-pixel / inforgation

  View on GitHub
  ☆43Nov 14, 2022Updated 3 years ago
• test502git / Hosts_scanV2

  View on GitHub
  这是一个用于IP和域名碰撞匹配访问的小工具优化版，能减少碰撞中出来的误报，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。
  ☆48Nov 18, 2021Updated 4 years ago
• NS-Sp4ce / OneForAll-WebUI

  View on GitHub
  OneForAll-WebUI
  ☆34Jan 6, 2023Updated 3 years ago
• iSafeBlue / presentation-slides

  View on GitHub
  ☆34Sep 19, 2022Updated 3 years ago
• pmiaowu / log4j2Scan

  View on GitHub
  用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件
  ☆212Apr 18, 2023Updated 2 years ago
• safe6Sec / ShellManageTool

  View on GitHub
  在网传的哥斯拉&冰蝎源码基础上加了一点注释
  ☆258May 16, 2022Updated 3 years ago
• 1in9e / icp-domains

  View on GitHub
  输入一个域名，输出ICP备案所有关联域名
  ☆257Dec 4, 2022Updated 3 years ago
• ze0r / cve-2019-0808-poc

  View on GitHub
  cve-2019-0808-poc
  ☆48Mar 25, 2019Updated 6 years ago
• aleenzz / .NET_study

  View on GitHub
  跟.net相关的学习
  ☆88Jun 24, 2024Updated last year
• SummerSec / SpringExploit

  View on GitHub
  🚀 一款为了学习go而诞生的漏洞利用工具
  ☆451Jun 14, 2022Updated 3 years ago
• BeichenDream / MysqlT

  View on GitHub
  伪造Myslq服务端,并利用Mysql逻辑漏洞来获取客户端的任意文件反击攻击者
  ☆363Apr 24, 2022Updated 3 years ago
• Mr-xn / Penetration_Testing_POC

  View on GitHub
  渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…
  ☆7,273Updated this week
• oneoy / thinkphp-RCE-POC

  View on GitHub
  thinkphp v5.x 远程代码执行漏洞-POC集合
  ☆25Aug 6, 2019Updated 6 years ago
• Firebasky / GoRmi

  View on GitHub
  该项目是通过go语言实现防止rmi利用被反置的问题。
  ☆44Dec 30, 2021Updated 4 years ago