渗透字典,框架信息泄露,备份文件泄露,配置文件泄露。字典
☆188May 11, 2023Updated 2 years ago
Alternatives and similar repositories for dic
Users that are interested in dic are comparing it to the libraries listed below
Sorting:
- Banli-高危资产识别和高危漏洞扫描☆457Apr 10, 2023Updated 2 years ago
- Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.☆1,075Jan 9, 2023Updated 3 years ago
- 各种数据库的利用姿势☆1,033Jan 3, 2025Updated last year
- 冰蝎Java WebShell自动化免杀生成☆782Mar 15, 2022Updated 3 years ago
- 内网渗透测试工具,弱密码爆破、信息收集和漏洞扫描☆609Jan 31, 2024Updated 2 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆769Jan 26, 2022Updated 4 years ago
- 魔改版内网扫描工具☆153Mar 16, 2022Updated 3 years ago
- 获取 alibaba druid 一些 sessions , sql , urls☆300Apr 4, 2025Updated 11 months ago
- Lateral movement☆943Feb 28, 2026Updated last week
- 主流供应商的一些攻击性漏洞汇总☆809Nov 8, 2021Updated 4 years ago
- Spring Actuator端点的BurpSuite被动扫描插件。☆202Nov 2, 2022Updated 3 years ago
- Windows活动目录中的LDAP信息收集工具☆234Oct 9, 2021Updated 4 years ago
- Java应用的一些配置文件字典,来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- AV/EDR Evasion☆914Feb 28, 2026Updated last week
- RPC远程主机信息匿名扫描工具☆317Sep 30, 2022Updated 3 years ago
- enc8 密码碰撞脚本☆33Jan 31, 2023Updated 3 years ago
- SpringBoot获取被星号脱敏的密码的明文☆57Dec 13, 2021Updated 4 years ago
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。☆456Aug 20, 2025Updated 6 months ago
- Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件☆1,314Jun 29, 2024Updated last year
- 弱口令,敏感目录,敏感文件等渗透测试常用攻击字典☆1,204Dec 16, 2021Updated 4 years ago
- H是一款强大的资产收集管理平台☆877Dec 28, 2022Updated 3 years ago
- 组合利用泛微信息泄漏漏洞和任意用户登录漏洞,可获取全部loginId并测试登录☆59Aug 3, 2023Updated 2 years ago
- 针对目标已知信息的字典生成工具☆209Sep 21, 2022Updated 3 years ago
- ☆168May 30, 2022Updated 3 years ago
- Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang☆572Jan 10, 2022Updated 4 years ago
- Xshell全版本密码恢复工具☆930Jun 8, 2023Updated 2 years ago
- 宝塔面板Windows版提权方法☆326Jan 26, 2021Updated 5 years ago
- 远程创建任务计划工具☆190Apr 23, 2022Updated 3 years ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,262Jan 30, 2022Updated 4 years ago
- 冰蝎 哥斯拉 WebShell bypass☆763Jan 15, 2026Updated last month
- frp修改版,增加socks、pf命令,便捷启用socks5代理、端口转发,且去除流量特征,增加loadini命令,支持命令行参数导入base64编码的配置文件☆103Dec 5, 2021Updated 4 years ago
- Flash-Pop升级版☆63Mar 9, 2023Updated 3 years ago
- 一款用于快速导出URL、Domain和IP的小工具☆233Sep 2, 2024Updated last year
- 完善的动态备份文件扫描工具 实现动态字典渲染、动态结果判断、自动字典记录、的敏感文件扫描器☆27May 21, 2025Updated 9 months ago
- rmi打内存马工具,适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 2 years ago
- 帆软/致远密码解密工具☆359Jul 29, 2021Updated 4 years ago
- 六大云存储,泄露利用检测工具☆1,243Mar 28, 2025Updated 11 months ago
- Golang-Gin 框架写的免杀平台,内置分离、捆绑等多种BypassAV方式。☆692Jul 13, 2023Updated 2 years ago
- Fastjson扫描器,可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,049Oct 7, 2022Updated 3 years ago