sqlsec/ssrf-vuls external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

sqlsec/ssrf-vuls

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/sqlsec/ssrf-vuls)

Close

sqlsec / ssrf-vulsView on GitHubMore

• External links
• Readme badge

国光的手把手带你用 SSRF 打穿内网靶场源码

☆410May 10, 2021Updated 4 years ago

Alternatives and similar repositories for ssrf-vuls

Users that are interested in ssrf-vuls are comparing it to the libraries listed below

• jayus0821 / swagger-hack

  View on GitHub
  自动化爬取并自动测试所有swagger接口
  ☆1,165Dec 1, 2025Updated 3 months ago
• rtcatc / Packer-Fuzzer

  View on GitHub
  Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…
  ☆3,213May 24, 2024Updated last year
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,033Jan 3, 2025Updated last year
• Weik1 / Artillery

  View on GitHub
  JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。
  ☆542Nov 20, 2023Updated 2 years ago
• iframepm / FuckAV

  View on GitHub
  python写的一款免杀工具（shellcode加载器）BypassAV，国内杀软全过（windows denfend）2021-9-13
  ☆287Oct 28, 2024Updated last year
• 0range-x / Domain-penetration_one-stop

  View on GitHub
  域渗透一条龙
  ☆738Feb 16, 2022Updated 4 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆770Jan 26, 2022Updated 4 years ago
• bitterzzZZ / MemoryShellLearn

  View on GitHub
  分享几个直接可用的内存马，记录一下学习过程中看过的文章
  ☆979Mar 23, 2022Updated 3 years ago
• EdgeSecurityTeam / EHole

  View on GitHub
  EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具
  ☆3,445Apr 2, 2024Updated last year
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆736Sep 9, 2024Updated last year
• HackJava / HackJava

  View on GitHub
  《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
  ☆2,874Aug 4, 2023Updated 2 years ago
• bit4woo / domain_hunter_pro

  View on GitHub
  domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
  ☆2,118Mar 3, 2026Updated 2 weeks ago
• Y4tacker / JavaSec

  View on GitHub
  a rep for documenting my study, may be from 0 to 0.1
  ☆2,254Nov 10, 2025Updated 4 months ago
• UzJu / Cloud-Bucket-Leak-Detection-Tools

  View on GitHub
  六大云存储，泄露利用检测工具
  ☆1,245Mar 28, 2025Updated 11 months ago
• lijiejie / swagger-exp

  View on GitHub
  A Swagger API Exploit
  ☆1,369Jun 7, 2024Updated last year
• lu2ker / PHP-Code

  View on GitHub
  通过ThinkPHP框架学习PHP代码审计
  ☆294Jun 19, 2024Updated last year
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,026Feb 23, 2022Updated 4 years ago
• Junehck / SQL-injection-bypass

  View on GitHub
  记录实战中的各种sql注入绕过姿势
  ☆663Sep 7, 2022Updated 3 years ago
• AlphabugX / Alphalog

  View on GitHub
  DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red)，Alphalog与传统DNSLog不同，更快、更安全。
  ☆457Aug 20, 2025Updated 7 months ago
• SafeGroceryStore / MDUT

  View on GitHub
  MDUT - Multiple Database Utilization Tools
  ☆2,194Sep 22, 2023Updated 2 years ago
• Maskhe / javasec

  View on GitHub
  自己学习java安全的一些总结，主要是安全审计相关
  ☆1,695Jan 5, 2022Updated 4 years ago
• mrknow001 / aliyun-accesskey-Tools

  View on GitHub
  阿里云accesskey利用工具
  ☆1,225Apr 8, 2022Updated 3 years ago
• gh0stkey / Web-Fuzzing-Box

  View on GitHub
  Web Fuzzing Box - Web 模糊测试字典与一些Payloads
  ☆2,454May 28, 2025Updated 9 months ago
• SafeGroceryStore / Caesar

  View on GitHub
  一个全新的敏感文件发现工具
  ☆270Jan 5, 2021Updated 5 years ago
• biggerduck / RedTeamNotes

  View on GitHub
  红队笔记
  ☆2,123Updated this week
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,014May 21, 2024Updated last year
• z1un / Z1-AggressorScripts

  View on GitHub
  适用于Cobalt Strike的插件
  ☆561May 30, 2021Updated 4 years ago
• safe6Sec / command

  View on GitHub
  红队常用命令速查
  ☆1,016Updated this week
• gh0stkey / HaE

  View on GitHub
  HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.
  ☆4,111Mar 13, 2026Updated last week
• ybdt / post-hub

  View on GitHub
  Lateral Movement
  ☆943Mar 13, 2026Updated last week
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,405Jan 18, 2022Updated 4 years ago
• 1y0n / AV_Evasion_Tool

  View on GitHub
  掩日 - 免杀执行器生成工具
  ☆2,755Aug 18, 2025Updated 7 months ago
• momosecurity / FindSomething

  View on GitHub
  基于chrome、firefox插件的被动式信息泄漏检测工具
  ☆1,389Nov 17, 2024Updated last year
• sqlsec / upload-labs-docker

  View on GitHub
  国光的文件上传靶场，基于 upload-labs 定制
  ☆207Mar 25, 2021Updated 4 years ago
• fofapro / vulfocus

  View on GitHub
  🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。
  ☆3,440Sep 9, 2025Updated 6 months ago
• safe6Sec / Fastjson

  View on GitHub
  Fastjson姿势技巧集合
  ☆1,833Oct 20, 2023Updated 2 years ago
• kelvinBen / AppInfoScanner

  View on GitHub
  一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN…
  ☆3,512Dec 18, 2022Updated 3 years ago
• TryGOTry / DogCs4.4

  View on GitHub
  cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)
  ☆573Jan 17, 2023Updated 3 years ago
• bit4woo / Fiora

  View on GitHub
  Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。
  ☆1,276Jul 2, 2025Updated 8 months ago