收集本人自接触渗透测试用于漏洞验证的所有热门CVE、POC、CNVD攻击有效载荷+测试工具+FUZZ,一个仓库满足许多攻击测试场景,开箱即用.
☆171Oct 23, 2025Updated last year
Alternatives and similar repositories for CVE-Master
Users that are interested in CVE-Master are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 非常专业的漏洞POC管理、团队授权化漏洞管理、漏洞验证利用、漏洞批量利用框架。☆241Jan 19, 2023Updated 3 years ago
- OA综合利用工具，集合将近20款OA漏洞批量扫描☆1,344Oct 28, 2023Updated 3 years ago
- 一个既可以满足安服仔日常渗透工作也可以批量刷洞的工具盒子。集合了常见的域名收集、目录扫描、ip扫描、指纹扫描、PoC验证等常用工具，方便安服仔快速展开渗透测试☆534Aug 26, 2026Updated 2 months ago
- 自研JavaFX图形化漏洞扫描工具，支持扫描的漏洞分别是： ThinkPHP-2.x-RCE， ThinkPHP-5.0.23-RCE， ThinkPHP5.0.x-5.0.23通杀RCE， ThinkPHP5-SQL注入&敏感信息泄露， ThinkPHP 3.x 日志泄露…☆470May 9, 2025Updated last year
- Red Tools 渗透测试☆587Jul 7, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 致力于收集Goby PoC，请勿用于非法操作，后果自负。☆244Sep 21, 2022Updated 4 years ago
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆239Nov 25, 2022Updated 3 years ago
- 高危漏洞利用工具☆1,830Feb 12, 2025Updated last year
- OAExploit一款基于产品的一键扫描工具。☆1,483Sep 20, 2022Updated 4 years ago
- F-vuln（全称：Find-Vulnerability）是为了自己工作方便专门编写的一款自动化工具，主要适用于日常安全服务、渗透测试人员和RedTeam红队人员，它集合的功能包括：存活IP探测、开放端口探测、web服务探测、web漏洞扫描、smb爆破、ssh爆破、ftp爆…☆1,161Jul 22, 2023Updated 3 years ago
- cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)☆570Jan 17, 2023Updated 3 years ago
- 本项目包含poc和exp，未经授权禁止攻击他人电脑。如个人违反安全相关法律，后果与本人无关☆30Sep 28, 2022Updated 4 years ago
- Redis 漏洞利用工具☆940Jan 26, 2025Updated last year
- 利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点☆2,368Jun 9, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- goon,集合了fscan和kscan等优秀工具功能的扫描爆破工具。功能包含：ip探活、port扫描、web指纹扫描、title扫描、压缩文件扫描、fofa获取、ms17010、mssql、mysql、postgres、redis、ssh、smb、rdp、telnet、to…☆807Aug 5, 2024Updated 2 years ago
- 用于生成各类免杀webshell☆1,323Jan 8, 2026Updated 9 months ago
- superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。☆1,434Dec 16, 2024Updated last year
- Webpack自动化信息收集☆314Feb 20, 2023Updated 3 years ago
- 一个全新的敏感文件发现工具☆271Jan 4, 2021Updated 5 years ago
- 被动收集资产并自动进行SQL注入检测（插件化 自动Bypass）、XSS检测、RCE检测、敏感信息检测☆196Nov 29, 2023Updated 2 years ago
- macOS上的小而美【Fofa、Shodan、Hunter、Zoomeye、Quake网络空间搜索引擎】闪电搜索器；GUI图形化(Mac/Windows)渗透测试信息搜集工具；资产搜集引擎；hw红队工具hvv☆667Dec 6, 2024Updated last year
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,051Oct 7, 2022Updated 4 years ago
- 分享极梦C团队写的一些使用工具☆57Nov 6, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 一款java漏洞集合工具☆1,151Jan 13, 2026Updated 9 months ago
- impacket-gui☆298Sep 4, 2023Updated 3 years ago
- 用友系列全漏洞检测工具☆193Jul 5, 2023Updated 3 years ago
- Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描☆1,115Sep 16, 2023Updated 3 years ago
- 蓝队利器、溯源反制、NPS 漏洞利用、NPS exp、NPS poc、Burp插件、一键利用☆704Apr 26, 2025Updated last year
- 一款集成高危漏洞exp的实用性工具☆1,314Nov 6, 2024Updated last year
- 红队批量脆弱点搜集工具☆333Jun 6, 2023Updated 3 years ago
- WaterExp:面向安服仔的 水报告模板和工具☆709Oct 14, 2022Updated 4 years ago
- Spring漏洞综合利用工具☆677Jun 26, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- rad加crawlergo爬虫，查漏补缺☆116Jun 21, 2021Updated 5 years ago
- jsinfo-scan简单改版，增加了swagger、druid目录扫描和手机号、身份证号敏感信息匹配☆45Oct 22, 2021Updated 5 years ago
- sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！☆711Jan 21, 2025Updated last year
- ☆88Sep 25, 2023Updated 3 years ago
- 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.☆2,198May 11, 2026Updated 5 months ago
- 渗透测试辅助工具箱，反弹shell，命令生成器，输入对应IP端口即可，实现一劳永逸☆37Feb 8, 2023Updated 3 years ago
- 一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆864Aug 30, 2023Updated 3 years ago