渗透测试常用密码字典合集(持续更新)
☆877May 18, 2023Updated 2 years ago
Alternatives and similar repositories for PasswordDic
Users that are interested in PasswordDic are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 自己搜集的爆破字典，包括常用用户名、密码弱口令、SQL万能密码等☆644Jun 9, 2024Updated last year
- 口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型☆1,318Oct 8, 2021Updated 4 years ago
- OA综合利用工具，集合将近20款OA漏洞批量扫描☆1,342Oct 28, 2023Updated 2 years ago
- 一些自己常用的渗透字典☆232Aug 19, 2022Updated 3 years ago
- 逸尘的字典 渗透测试个人专用的字典，搜索网上，及自己平常收集的一些路径，其中信息包括HVV中常见的各大厂商的弱密码，web常见漏洞测试，会遇到的邮箱，密码，服务弱口令，中间件，子域名，漏洞路径，账户密码，等等，这些内容都是基于本人在实战中收集到的，其中包含Github上公…☆307Jul 16, 2023Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看☆127Apr 17, 2023Updated 3 years ago
- 一款用Go语言编写的数据库自动化提权工具，支 持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆863Aug 30, 2023Updated 2 years ago
- Spring漏洞综合利用工具☆674Jul 5, 2023Updated 2 years ago
- 一款集成高危漏洞exp的实用性工具☆1,308Nov 6, 2024Updated last year
- 高危漏洞利用工具☆1,834Feb 12, 2025Updated last year
- 针对目标已知信息的字典生成工具☆208Sep 21, 2022Updated 3 years ago
- 一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.☆4,947Apr 23, 2026Updated 2 weeks ago
- WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）☆1,784Nov 1, 2023Updated 2 years ago
- Redis 漏洞利用工具☆941Jan 26, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack☆2,482Apr 12, 2026Updated 3 weeks ago
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆242Nov 25, 2022Updated 3 years ago
- 一款用于快速导出URL、Domain和IP的小工具☆233Sep 2, 2024Updated last year
- 冰蝎Java WebShell自动化免杀生成☆782Mar 15, 2022Updated 4 years ago
- Weblogic漏洞利用图形化工具 支持注入内存马、一键上传webshell、命令执行☆779Apr 20, 2022Updated 4 years ago
- Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用☆851Jul 7, 2023Updated 2 years ago
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆321Feb 1, 2024Updated 2 years ago
- 域控安全one for all☆739Sep 9, 2024Updated last year
- 高性能 HTTP 正向代理工具 | A high-performance http tunneling tool☆2,710Feb 2, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 强大的敏感信息搜索工具☆981Nov 23, 2024Updated last year
- 用于生成各类免杀webshell☆1,299Jan 8, 2026Updated 4 months ago
- JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021☆275Jun 6, 2025Updated 11 months ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆254Jul 12, 2023Updated 2 years ago
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,053Oct 7, 2022Updated 3 years ago
- 一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗☆1,665Jan 19, 2023Updated 3 years ago
- 云安全利用工具-云平台AK/SK-WEB利用工具，添加AK/SK自动检测资源，无需手动执行，支持云服务器、存储桶、数据库操作☆588Dec 19, 2024Updated last year
- 一个用于处理fsacn输出结果的小脚本（尤其面对大量资产的fscan扫描结果做输出优化，让你打点快人一步！！！）☆443Aug 28, 2024Updated last year
- ThinkPHP漏洞综合利用工具, 图形化界面, 命令执行, 一键getshell, 批量检测, 日志遍历, session包含,宝塔绕过☆777Jul 2, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别☆874Sep 30, 2025Updated 7 months ago
- Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描☆1,119Sep 16, 2023Updated 2 years ago
- 红队笔记☆2,142Mar 16, 2026Updated last month
- 一个有点好用的信息收集工具。A somewhat useful information gathering tool.☆1,191Dec 17, 2024Updated last year
- captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite☆1,911Aug 26, 2025Updated 8 months ago
- CVE-2022-22947 注入Godzilla内存马☆212Apr 26, 2022Updated 4 years ago
- heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等☆1,446May 21, 2024Updated last year