渗透测试常用密码字典合集(持续更新)
☆858May 18, 2023Updated 2 years ago
Alternatives and similar repositories for PasswordDic
Users that are interested in PasswordDic are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 自己搜集的爆破字典，包括常用用户名、密码弱口令、SQL万能密码等☆638Jun 9, 2024Updated last year
- 口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型☆1,317Oct 8, 2021Updated 4 years ago
- OA综合利用工具，集合将近20款OA漏洞批量扫描☆1,339Oct 28, 2023Updated 2 years ago
- 一些自己常用的渗透字典☆230Aug 19, 2022Updated 3 years ago
- 逸尘的字典 渗透测试个人专用的字典，搜索网上，及自己平常收集的一些路径，其中信息包括HVV中常见的各大厂商的弱密码，web常见漏洞测试，会遇到的邮箱，密码，服务弱口令，中间件，子域名，漏洞路径，账户密码，等等，这些内容都是基于本人在实战中收集到的，其中包含Github上公…☆307Jul 16, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- 用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看☆127Apr 17, 2023Updated 2 years ago
- 一款用Go语言编写的数据库自动化提权工具，支 持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆861Aug 30, 2023Updated 2 years ago
- 一款集成高危漏洞exp的实用性工具☆1,295Nov 6, 2024Updated last year
- Spring漏洞综合利用工具☆674Jul 5, 2023Updated 2 years ago
- 高危漏洞利用工具☆1,830Feb 12, 2025Updated last year
- 针对目标已知信息的字典生成工具☆209Sep 21, 2022Updated 3 years ago
- 一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.☆4,885Updated this week
- WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）☆1,777Nov 1, 2023Updated 2 years ago
- Redis 漏洞利用工具☆939Jan 26, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack☆2,396Apr 10, 2024Updated last year
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆242Nov 25, 2022Updated 3 years ago
- 一款用于快速导出URL、Domain和IP的小工具☆233Sep 2, 2024Updated last year
- 冰蝎Java WebShell自动化免杀生成☆783Mar 15, 2022Updated 4 years ago
- Weblogic漏洞利用图形化工具 支持注入内存马、一键上传webshell、命令执行☆775Apr 20, 2022Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用☆847Jul 7, 2023Updated 2 years ago
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- 域控安全one for all☆736Sep 9, 2024Updated last year
- 高性能 HTTP 正向代理工具 | A high-performance http tunneling tool☆2,689Feb 2, 2026Updated last month
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- 强大的敏感信息搜索工具☆978Nov 23, 2024Updated last year
- 用于生成各类免杀webshell☆1,291Jan 8, 2026Updated 2 months ago
- JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021☆273Jun 6, 2025Updated 9 months ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 2 years ago
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,051Oct 7, 2022Updated 3 years ago
- 一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗☆1,659Jan 19, 2023Updated 3 years ago
- 云安全利用工具-云平台AK/SK-WEB利用工具，添加AK/SK自动检测资源，无需手动执行，支持云服务器、存储桶、数据库操作☆587Dec 19, 2024Updated last year
- ThinkPHP漏洞综合利用工具, 图形化界面, 命令执行, 一键getshell, 批量检测, 日志遍历, session包含,宝塔绕过☆772Jul 2, 2022Updated 3 years ago
- 一个用于处理fsacn输出结果的小脚本（尤其面对大量资产的fscan扫描结果做输出优化，让你打点快人一步！！！）☆443Aug 28, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- 目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别☆864Sep 30, 2025Updated 5 months ago
- Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描☆1,115Sep 16, 2023Updated 2 years ago
- 红队笔记☆2,124Mar 16, 2026Updated last week
- 一个有点好用的信息收集工具。A somewhat useful information gathering tool.☆1,190Dec 17, 2024Updated last year
- captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite☆1,886Aug 26, 2025Updated 7 months ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,110Feb 28, 2026Updated last month
- heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等☆1,436May 21, 2024Updated last year