Alternatives and similar repositories for 0day

Users that are interested in 0day are comparing it to the libraries listed below

• 1oid / remotejs
  remote execute js when debugger.paused
  ☆47Updated 2 years ago
• sv3nbeast / X-AutoXray
  AutoScan 有多个目标时，多线程调用xray+rad进行自动扫描
  ☆88Updated 3 years ago
• chroblert / JC-AntiToken
  burp插件：python版，token防重放绕过
  ☆20Updated 5 years ago
• hmoytx / bp_miniprogram_decrypt
  小程序登陆包加解密
  ☆45Updated 4 years ago
• pmiaowu / BurpHttpForwardRequests
  burp-http请求转发至其他模块的插件
  ☆76Updated 5 years ago
• coffeehb / Spring4Shell
  一个Spring4Shell 被动式检测的Burp插件
  ☆94Updated 3 years ago
• bravery9 / ShiroExploit
  ShiroExploit 是一款 Shiro 可视化利用工具，集成密钥爆破，命令回显内存马注入等功能
  ☆28Updated 4 years ago
• Conanjun / passive-scan-client-and-sendto
  burp被动扫描自动转发和手动重发插件
  ☆51Updated 5 years ago
• R17a-17 / JavaVulnSummary
  Java漏洞分析汇合
  ☆142Updated 4 years ago
• GuoKerS / Charset_encoding-Burp
  利用字符集编码绕过waf的burpsuite插件
  ☆125Updated 4 years ago
• cckuailong / YarnRpcRCE
  ☆83Updated 4 years ago
• xinxin999 / Exp-collect
  ☆29Updated 4 years ago
• jixing-lab / lbb
  lbb是一个企业信息查询工具，可以帮助企业查询自身对外公开的应用、新媒体，网站等。
  ☆43Updated 3 years ago
• passer-W / snakeyaml-memshell
  springboot跨线程注入内存马
  ☆123Updated 3 years ago
• safe6Sec / ThinkPHPLogScan
  tp日志泄露扫描工具
  ☆85Updated 6 months ago
• bigsizeme / Log4j-check
  log4J burp被扫插件、CVE-2021-44228、支持dnclog.cn和burp内置DNS、可配合JNDIExploit生成payload
  ☆70Updated 4 years ago
• mrknow001 / xxl-job-rce
  xxl-job未授权命令执行
  ☆114Updated 3 years ago
• longofo / PaddingOracleAttack-Shiro-721
  Shiro-721 Padding Oracle Attack
  ☆73Updated 4 years ago
• MaskCyberSecurityTeam / BurpHttpHelper
  BurpHttpHelper是一款Burpsuite插件，主要用于简化和解决Burpsuite对Http的一些操作.
  ☆106Updated 3 years ago
• 0Chencc / DaE
  CTFCrackTools 's BurpSuite Plugin - Decode and Encode
  ☆83Updated 3 years ago
• 8ypass / weblogicExploit
  weblogic历史漏洞利用工具
  ☆90Updated 3 years ago
• KpLi0rn / ysoserial
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Updated 4 years ago
• ce-automne / FastjsonPatrol
  一款探测fastjson漏洞的BurpSuite插件
  ☆61Updated 3 years ago
• cyal1 / host_scan
  这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go
  ☆116Updated 3 years ago
• liangyueliangyue / spring-core-rce
  springFramework_CVE-2022-22965_RCE简单利用
  ☆26Updated 3 years ago
• welk1n / FastjsonPocs
  一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。
  ☆56Updated 6 years ago
• theLSA / burp-info-extractor
  burpsuite extension for extract information from data
  ☆87Updated last year
• vulhub / Apereo-CAS-Attack
  WIP: Demo for Attacking Apereo CAS
  ☆97Updated 5 years ago
• geekjy / xray_crack
  xray 1.8.5 full crack
  ☆46Updated 3 years ago
• ianxtianxt / MS14-068
  域渗透工具
  ☆22Updated 6 years ago