sjatsh / unwxapkgView external linksLinks
WeChat applet .wxapkg decoding tool
☆266Jul 15, 2020Updated 5 years ago
Alternatives and similar repositories for unwxapkg
Users that are interested in unwxapkg are comparing it to the libraries listed below
Sorting:
- 泛微OA_V9全版本前台任意文件上传漏洞☆29Apr 26, 2022Updated 3 years ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆450Jun 14, 2022Updated 3 years ago
- AWS云平台 AccessKey 泄漏利用工具☆393Jul 18, 2023Updated 2 years ago
- Java应用的一些配置文件字典,来源于公开的字典与平时收集☆321Feb 1, 2024Updated 2 years ago
- fastjson不出网利用、c3p0☆255Jul 30, 2021Updated 4 years ago
- CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等,解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计☆286Mar 19, 2022Updated 3 years ago
- 冰蝎 哥斯拉 WebShell bypass☆761Jan 15, 2026Updated last month
- Fastjson扫描器,可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,049Oct 7, 2022Updated 3 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- 可用于多个网络资产测绘引擎 API 的命令行查询工具☆184Sep 14, 2023Updated 2 years ago
- 备份文件扫描,并自动进行下载☆130Jul 26, 2023Updated 2 years ago
- rmi打内存马工具,适用于目标用不了ldap的情况☆254Jul 12, 2023Updated 2 years ago
- web fuzzing && bug hunter☆61Nov 23, 2021Updated 4 years ago
- fastjson 被动扫描、不出网payload生成☆367Nov 19, 2021Updated 4 years ago
- ☆294May 7, 2022Updated 3 years ago
- springboot跨线程注入内存马☆123Apr 10, 2022Updated 3 years ago
- CVE-2022-22947 注入Godzilla内存马☆210Apr 26, 2022Updated 3 years ago
- 禅道研发项目管理系统`misc-captcha-user`认证绕过后台命令注入漏洞☆108Apr 24, 2023Updated 2 years ago
- 获取Exchange信息的小工具☆232Oct 26, 2023Updated 2 years ago
- SMTP Netcat , test SMTP protocol☆105Jan 14, 2022Updated 4 years ago
- 六大云存储,泄露利用检测工具☆1,241Mar 28, 2025Updated 10 months ago
- golang打包二进制进行免杀☆233Apr 7, 2021Updated 4 years ago
- AK资源管理工具,阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret,利用AK获取资源信息和操作资源,ECS/CVM/E2/UHOST/ECI/BCC执行命令,OSS/COS/S3/BOS…☆778Feb 13, 2025Updated last year
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆770Jan 26, 2022Updated 4 years ago
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。☆456Aug 20, 2025Updated 5 months ago
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆711May 10, 2021Updated 4 years ago
- 本项目用于搜集 2022 年的漏洞,注意:本项目并不刻意搜集 POC 或 EXP,主要以CVE-2021、CVE-2022 为关键词,包含但不限于漏洞资讯、漏洞复现、漏洞分析、漏洞验证、漏洞利用☆381Apr 17, 2022Updated 3 years ago
- 给woodpecker框架量身定制的ysoserial☆607Oct 26, 2022Updated 3 years ago
- 关于安全狗和云锁 的自动化绕过脚本☆522Nov 15, 2021Updated 4 years ago
- OpenFire 管理后台账号密码解密☆30Dec 15, 2020Updated 5 years ago
- Xshell全版本密码恢复工具☆928Jun 8, 2023Updated 2 years ago
- AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell☆163Sep 28, 2021Updated 4 years ago
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- MySQL_Fake_Server-啄木鸟yso适配版☆45Sep 20, 2024Updated last year
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- TaiO 的定位是一款用于攻击方对靶标资产梳理,快速定位脆弱资产的网络空间测绘工具☆75Mar 9, 2022Updated 3 years ago
- heapdump敏感信息查询工具,例如查找 spring heapdump中的密码明文,AK,SK等☆1,433May 21, 2024Updated last year
- 清除Go编译时自带的信息☆855Jul 20, 2022Updated 3 years ago