(持续更新)对网上出现的各种OA、中间件、CMS等漏洞进行整理，主要包括漏洞介绍、漏洞影响版本以及漏洞POC/EXP等，并且会持续更新。
☆516Nov 2, 2023Updated 2 years ago
Alternatives and similar repositories for Vuln-List
Users that are interested in Vuln-List are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC&EXP仓库、hvv弹药库、Nday、1day☆1,105Nov 11, 2022Updated 3 years ago
- OAExploit一款基于产品的一键扫描工具。☆1,485Sep 20, 2022Updated 3 years ago
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新☆2,364Sep 12, 2023Updated 2 years ago
- 高危漏洞利用工具☆1,831Feb 12, 2025Updated last year
- 利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点☆2,366Jun 9, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗☆1,681Jan 19, 2023Updated 3 years ago
- OA综合利用工具，集合将近20款OA漏洞批量扫描☆1,347Oct 28, 2023Updated 2 years ago
- 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.☆2,150May 11, 2026Updated 2 months ago
- 各种数据库的利用姿势☆1,034Jan 3, 2025Updated last year
- 项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,902Jan 15, 2024Updated 2 years ago
- Poc and Exp☆1,247Dec 8, 2025Updated 7 months ago
- Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描☆1,122Sep 16, 2023Updated 2 years ago
- 一个有点好用的信息收集工具。A somewhat useful information gathering tool.☆1,196Dec 17, 2024Updated last year
- 六大云存储，泄露利用检测工具☆1,262Mar 28, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- shiro综合利用工具☆654Apr 15, 2023Updated 3 years ago
- 致力于收集Goby PoC，请勿用于非法操作，后果自负。☆245Sep 21, 2022Updated 3 years ago
- Redis 漏洞利用工具☆946Jan 26, 2025Updated last year
- 收集、整理、修改互联网上公开的漏洞POC☆972Jul 27, 2025Updated 11 months ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆450Jun 14, 2022Updated 4 years ago
- 用于生成各类免杀webshell☆1,317Jan 8, 2026Updated 6 months ago
- 一款集成高危漏洞exp的实用性工具☆1,315Nov 6, 2024Updated last year
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,479Apr 25, 2024Updated 2 years ago
- Spring漏洞综合利用工具☆681Jun 26, 2026Updated 3 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,146Jun 23, 2026Updated last month
- 一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.☆5,112May 11, 2026Updated 2 months ago
- 红队笔记☆2,168Mar 16, 2026Updated 4 months ago
- SpringScan 漏洞检测 Burp插件☆605Nov 14, 2023Updated 2 years ago
- 非常专业的漏洞POC管理、团队授权化漏洞管理、漏洞验证利用、漏洞批量利用框架。☆244Jan 19, 2023Updated 3 years ago
- superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。☆1,436Dec 16, 2024Updated last year
- shiro反序列化漏洞综合利用（仅限授权测试使用）☆2,606Jun 4, 2026Updated last month
- 致远OA综合利用工具☆425Jun 3, 2021Updated 5 years ago
- 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN…☆3,542Dec 18, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）☆2,231Jul 25, 2023Updated 3 years ago
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red)，Alphalog与传统DNSLog不同，更快、更安全。☆463Aug 20, 2025Updated 11 months ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,020May 21, 2024Updated 2 years ago
- WebSocket 内存马/Webshell，一种新型内存马/WebShell技术☆1,493Apr 10, 2023Updated 3 years ago
- An integrated BurpSuite vulnerability detection plug-in.☆1,539Updated this week
- EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具☆3,500Apr 2, 2024Updated 2 years ago
- 记录实战中的各种sql注入绕过姿势☆665Sep 7, 2022Updated 3 years ago