Alternatives and similar repositories for webshell

Users that are interested in webshell are comparing it to the libraries listed below

• SecWiki / windows-kernel-exploits
  windows-kernel-exploits Windows平台提权漏洞集合
  ☆8,499Updated 4 years ago
• xl7dev / WebShell
  Webshell && Backdoor Collection
  ☆1,949Updated 5 years ago
• lijiejie / GitHack
  A `.git` folder disclosure exploit
  ☆3,459Updated 2 years ago
• EnableSecurity / wafw00f
  WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
  ☆5,975Updated last month
• Audi-1 / sqli-labs
  SQLI labs to test error based, Blind boolean based, Time based.
  ☆5,625Updated last year
• epinna / weevely3
  Weaponized web shell
  ☆3,407Updated last month
• lijiejie / subDomainsBrute
  A fast sub domain brute tool for pentesters
  ☆3,583Updated 3 years ago
• sensepost / reGeorg
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
  ☆3,129Updated 8 months ago
• JohnTroony / php-webshells
  Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!
  ☆1,924Updated 4 years ago
• maurosoria / dirsearch
  Web path scanner
  ☆13,614Updated 3 weeks ago
• knownsec / pocsuite3
  pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
  ☆3,794Updated 8 months ago
• SecWiki / linux-kernel-exploits
  linux-kernel-exploits Linux平台提权漏洞集合
  ☆5,518Updated 5 years ago
• Medicean / VulApps
  快速搭建各种漏洞环境(Various vulnerability environment)
  ☆3,770Updated 5 years ago
• frohoff / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆8,580Updated last year
• xmendez / wfuzz
  Web application fuzzer
  ☆6,330Updated last year
• fuzzdb-project / fuzzdb
  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  ☆8,723Updated 2 years ago
• urbanadventurer / WhatWeb
  Next generation web scanner
  ☆6,161Updated 3 weeks ago
• The-Z-Labs / linux-exploit-suggester
  Linux privilege escalation auditing tool
  ☆6,248Updated last year
• zer0yu / Awesome-CobaltStrike
  List of Awesome CobaltStrike Resources
  ☆4,301Updated 2 years ago
• epinna / tplmap
  Server-Side Template Injection and Code Injection Detection and Exploitation Tool
  ☆4,063Updated last year
• AntSwordProject / antSword
  中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
  ☆4,330Updated 9 months ago
• commixproject / commix
  Automated All-in-One OS Command Injection Exploitation Tool.
  ☆5,511Updated 2 weeks ago
• shmilylty / OneForAll
  OneForAll是一款功能强大的子域收集工具
  ☆9,388Updated 2 months ago
• Chora10 / Cknife
  Cknife
  ☆2,437Updated last year
• tennc / fuzzdb
  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  ☆1,388Updated 4 years ago
• lanjelot / patator
  Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
  ☆3,789Updated 5 months ago
• b374k / b374k
  PHP Webshell with handy features
  ☆2,556Updated 2 years ago
• huntergregal / mimipenguin
  A tool to dump the login password from the current linux user
  ☆4,038Updated 2 months ago
• H4ckForJob / dirmap
  An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工…
  ☆3,338Updated 3 weeks ago
• ticarpi / jwt_tool
  A toolkit for testing, tweaking and cracking JSON Web Tokens
  ☆6,177Updated 6 months ago