国光的手把手带你用 SSRF 打穿内网靶场源码
☆409May 10, 2021Updated 4 years ago
Alternatives and similar repositories for ssrf-vuls
Users that are interested in ssrf-vuls are comparing it to the libraries listed below
Sorting:
- 自动化爬取并自动测试所有swagger接口☆1,162Dec 1, 2025Updated 2 months ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆770Jan 26, 2022Updated 4 years ago
- JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。☆542Nov 20, 2023Updated 2 years ago
- 各种数据库的利用姿势☆1,034Jan 3, 2025Updated last year
- Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…☆3,209May 24, 2024Updated last year
- 分享几个直接可用的内存马，记录一下学习过程中看过的文章☆975Mar 23, 2022Updated 3 years ago
- 域渗透一条龙☆738Feb 16, 2022Updated 4 years ago
- 域控安全one for all☆736Sep 9, 2024Updated last year
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,116Jan 23, 2026Updated last month
- 红队常用命令速查☆1,014Feb 7, 2026Updated 3 weeks ago
- 记录实战中的各种sql注入绕过姿势☆661Sep 7, 2022Updated 3 years ago
- 六大云存储，泄露利用检测工具☆1,241Mar 28, 2025Updated 11 months ago
- python写的一款免杀工具（shellcode加载器）BypassAV，国内杀软全过（windows denfend）2021-9-13☆286Oct 28, 2024Updated last year
- 《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.☆2,872Aug 4, 2023Updated 2 years ago
- a rep for documenting my study, may be from 0 to 0.1☆2,248Nov 10, 2025Updated 3 months ago
- MDUT - Multiple Database Utilization Tools☆2,190Sep 22, 2023Updated 2 years ago
- A Swagger API Exploit☆1,370Jun 7, 2024Updated last year
- EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具☆3,438Apr 2, 2024Updated last year
- Web Fuzzing Box - Web 模糊测试字典与一些Payloads☆2,444May 28, 2025Updated 9 months ago
- 阿里云accesskey利用工具☆1,225Apr 8, 2022Updated 3 years ago
- 适用于Cobalt Strike的插件☆562May 30, 2021Updated 4 years ago
- 通过ThinkPHP框架学习PHP代码审计☆293Jun 19, 2024Updated last year
- Lateral movement☆943Jan 11, 2026Updated last month
- Burp suite 分块传输辅助插件☆2,022Feb 23, 2022Updated 4 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,404Jan 18, 2022Updated 4 years ago
- 红队笔记☆2,118Apr 11, 2024Updated last year
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,012May 21, 2024Updated last year
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red)，Alphalog与传统DNSLog不同，更快、更安全。☆456Aug 20, 2025Updated 6 months ago
- 自己学习java安全的一些总结，主要是安全审计相关☆1,694Jan 5, 2022Updated 4 years ago
- shiro综合利用工具☆647Apr 15, 2023Updated 2 years ago
- 一个全新的敏感文件发现工具☆270Jan 5, 2021Updated 5 years ago
- Fastjson姿势技巧集合☆1,824Oct 20, 2023Updated 2 years ago
- Redis 漏洞利用工具☆938Jan 26, 2025Updated last year
- 掩日 - 免杀执行器生成工具☆2,759Aug 18, 2025Updated 6 months ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,262Jan 30, 2022Updated 4 years ago
- 通达OA综合利用工具☆516Mar 17, 2021Updated 4 years ago
- 一款可以在不出网的环境下进行反向代理及cs上线的工具☆491Apr 26, 2023Updated 2 years ago
- 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.☆2,024Updated this week
- Eeyes(棱眼)-快速筛选真实IP并整理为C段☆602Apr 4, 2021Updated 4 years ago