test502git / 360Quake

Related projects: ⓘ

• M0ge / CNVD-2021-49104-Fanwei-Eoffice-fileupload
  泛微eoffice最新文件上传漏洞POC，基于2个接口自动检测
  ☆16Updated 2 years ago
• K1p2y3 / Tencent_Yun_tools
  ☁️Tencent Cloud AccessKey tools
  ☆16Updated 2 months ago
• z1un / NC-BeanShell-RCE
  CNVD-2021-30167 用友NC BeanShell远程代码执行
  ☆31Updated 3 years ago
• chroblert / JC-AntiToken
  burp插件：python版，token防重放绕过
  ☆19Updated 3 years ago
• r00tSe7en / log4jScan_Modify
  对接JNDIMonitor的Burp Suite被动扫描插件
  ☆23Updated 2 years ago
• chaosec2021 / CVE-2022-22947-POC
  ☆34Updated this week
• lz520520 / encrypt-js
  ☆35Updated 2 years ago
• i11us0ry / tools-gophish
  gophish批量操作，适用于大批量钓鱼演练
  ☆29Updated 3 years ago
• ghealer / G_Scan
  一个超级缝合怪的图形化渗透工具
  ☆37Updated 3 years ago
• 4nth0ny1130 / shisoserial
  一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.
  ☆23Updated 2 years ago
• j2ekim / Security_Service_Interviews
  安服面经☞渗透测试/代码审计/安全研究
  ☆26Updated 2 years ago
• winezer0 / burp-wildcard-plus
  burpsuite wildcard 插件维护分支
  ☆1Updated last year
• ssrsec / SpringBootEnvDecrypt
  SpringBoot获取被星号脱敏的密码的明文
  ☆57Updated 2 years ago
• asaotomo / FofaMap-Cloud
  FofaMap云查询版是基于C/S架构打造的Fofa数据采集器，仅需配置好一个服务端，即可实现多个客户端同时在线查询，其客户端支持FofaMap国庆版全部功能。
  ☆39Updated last year
• rambleZzz / jmxbfGUI
  jmx未授权访问 弱口令批量检测 GUI工具
  ☆31Updated last year
• liangyueliangyue / spring-core-rce
  springFramework_CVE-2022-22965_RCE简单利用
  ☆26Updated 2 years ago
• Lotus6 / SpringExploit
  Spring core bean 日志 getshell 和 Spring Cloud Function SpEL 命令执行。
  ☆35Updated 2 years ago
• 7ten7 / WorkflowServiceXml-Exploit
  ☆31Updated 3 years ago
• S0por / CVE-2021-26295-Apache-OFBiz-EXP
  ☆15Updated this week
• BambiZombie / QRPhish
  二维码钓鱼
  ☆28Updated last year
• damit5 / cdnCheck_go
  快速批量判断目标列表是否存在CDN
  ☆25Updated 9 months ago
• gubeihc / Safe-development
  ☆15Updated this week
• dream0x01 / shiro-framework
  ☆37Updated this week
• r00tuser111 / SerializationDumper-Shiro
  基于SerializationDumper的Shiro Cookie序列化数据解密小工具
  ☆52Updated 4 years ago
• guguyu1 / tomcat_password
  tomcat 图形化弱口令爆破 也可以作为401认证爆破
  ☆13Updated 3 years ago
• tangxiaofeng7 / Spring-Cloud-Function-Spel
  Spring Cloud Function Spel命令执行漏洞
  ☆38Updated 2 years ago
• 0x727 / rotateproxy
  利用fofa搜索socks5开放代理进行代理池轮切的工具
  ☆36Updated 2 years ago
• wyzxxz / xzscanner
  自动化资产收集，端口扫描，指纹识别，蜜罐识别，漏洞检测 轻量级神器
  ☆32Updated 3 years ago
• Dghpi9 / NacosDefaultToken
  Alibaba Nacos存在默认token.secret.key，导致远程攻击者可以绕过密钥认证接管Nacos
  ☆18Updated last year
• guguyu1 / log4j2_burp_scan
  ☆26Updated this week