一款src捡洞扫描器
☆27Jan 13, 2021Updated 5 years ago
Alternatives and similar repositories for SScan
Users that are interested in SScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- UAC-ByPass utils☆11Jan 28, 2022Updated 4 years ago
- Resources required for my BiliBili Pwn tutorial☆12Feb 10, 2023Updated 3 years ago
- ClickHouse是一款开源的列式数据库，ClickHouse存在未授权访问漏洞，攻击者可利用该漏洞获取数据库的敏感信息☆14May 6, 2023Updated 3 years ago
- 自动化检测 Swagger API 接口未授权访问漏洞工具☆64Mar 10, 2025Updated last year
- Cross-Site Scripting (XSS) is a common vulnerability that allows attackers to inject malicious scripts into web pages viewed by users. In…☆11Sep 10, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Whale-ApiUse是burp插件，可以用来测试wx公众号，微信小程序，钉钉，企业微信等的接口，通过输入key和secret进行测试，之所以做这个首先这是一个练手项目，后续也会继续维护更新，如果有好的建议欢迎留言。其次由于现有的工具都要额外下载，用起来繁琐，所以我想着通…☆14Jan 7, 2024Updated 2 years ago
- Just simple PoC for the Atlassian Jira exploit. Provides code execution for unauthorised user on a server.☆12Jul 21, 2022Updated 4 years ago
- 一款支持 目录扫描(可配合熊猫头)+自动绕403+敏感匹配 等的小脚本工具，目前此脚本属于创始测试版，后续会继续升级！！！CowCow🐂🐂☆17Dec 27, 2024Updated last year
- ☆23Nov 25, 2024Updated last year
- Small Tool written based on chaos from projectdiscovery.io☆173Oct 19, 2024Updated 2 years ago
- 这是一个用于IP和域名碰撞匹配访问的小工具优化版，能减少碰撞中出来的误报，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。☆48Nov 18, 2021Updated 4 years ago
- 用于转换BurpSuite上无敌的Hae信息收集插件的配置规则为yakit使用☆18Apr 16, 2025Updated last year
- 黑魔鬼插件☆19Jan 30, 2021Updated 5 years ago
- Burpsuite验证码DOS攻击插件。☆21Oct 24, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 发布一些我发现的漏洞以及利用脚本。☆15Jun 29, 2023Updated 3 years ago
- 云安全漏洞挖掘与利用 Skill。S3 桶爆破枚举、公开桶敏感文件发现、SSRF→IMDS 凭证窃取探测、K8s 未授权访问检测、容器逃逸条件识别、 AK/SK 凭证验证与权限枚举、存储桶供应链攻击利用。☆33Jul 14, 2026Updated 3 months ago
- Privacy Check Go☆25Feb 11, 2026Updated 8 months ago
- nuclei模版生成插件☆110Dec 19, 2023Updated 2 years ago
- 蜜罐检测工具，支持自动化URL去重、多线程控制及智能速率限制。可识别伪装服务。☆15Jun 5, 2025Updated last year
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新☆12Mar 30, 2022Updated 4 years ago
- Burp-plugin☆17Jul 18, 2024Updated 2 years ago
- 一些POC 、EXP☆11Nov 4, 2019Updated 6 years ago
- 欢迎各位关注我们的公众号：摸鱼冲浪研究所☆43Nov 14, 2025Updated 11 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- python免杀shellcode加载器 加密混淆☆103Jun 6, 2022Updated 4 years ago
- 一款基于burp的反射xss检测插件☆151Dec 1, 2021Updated 4 years ago
- Script to quickly install Golang and the most popular PD repos☆55Aug 20, 2024Updated 2 years ago
- 漏洞检测框架 Meppo | By WingsSec☆230Nov 14, 2023Updated 2 years ago
- 辅助切换代理的一个浏览器插件.☆23Nov 8, 2020Updated 5 years ago
- ShadowScan 是一款面向安全从业人员的自动化信息泄露扫描与资产测绘工具。深度整合多平台搜索引擎，通过自动化 Dork 语法扫描发现暴露在公网的敏感文件，并自动提取身份证号、手机号、学号、邮箱、银行卡号等个人敏感信息（PII）。 支持 **Bing / FoFa /…☆50Jun 10, 2026Updated 4 months ago
- 只需运行一个简单的命令，即可选择安装或卸载所需的VPN协议,生成clash配置和小火箭配置☆13Jun 2, 2025Updated last year
- 就是一个burp插件啦(ÒܫÓױ)☆17Sep 9, 2021Updated 5 years ago
- 一款shellcode免杀工具，免杀测试对象火绒 联想等其他杀软☆50Jun 3, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件☆208Apr 18, 2023Updated 3 years ago
- java 代码审计学习靶场☆121Jan 11, 2024Updated 2 years ago
- A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploi…☆18May 8, 2026Updated 5 months ago
- 个人收集的弱口令。☆136Sep 3, 2022Updated 4 years ago
- ZentaoSqli 禅道存在SQL注入漏洞 CNVD-2022-42853☆19Aug 22, 2022Updated 4 years ago
- Shiro漏洞利用工具☆156Jan 12, 2026Updated 9 months ago
- Engagement fact graph for autonomous pentest agents — typed facts, flag ledger, arena adapter, offline KB. Offensive fork of claude-fact-…☆27Oct 16, 2026Updated 2 weeks ago