(持续更新)对网上出现的各种OA、中间件、CMS等漏洞进行整理，主要包括漏洞介绍、漏洞影响版本以及漏洞POC/EXP等，并且会持续更新。
☆515Nov 2, 2023Updated 2 years ago
Alternatives and similar repositories for Vuln-List
Users that are interested in Vuln-List are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC&EXP仓库、hvv弹药库、Nday、1day☆1,105Nov 11, 2022Updated 3 years ago
- OAExploit一款基于产品的一键扫描工具。☆1,482Sep 20, 2022Updated 3 years ago
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新☆2,353Sep 12, 2023Updated 2 years ago
- 高危漏洞利用工具☆1,834Feb 12, 2025Updated last year
- 利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点☆2,358Jun 9, 2023Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 一款完全被动监听的谷歌插 件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗☆1,662Jan 19, 2023Updated 3 years ago
- OA综合利用工具，集合将近20款OA漏洞批量扫描☆1,342Oct 28, 2023Updated 2 years ago
- 一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.☆2,048Mar 23, 2026Updated 2 weeks ago
- 各种数据库的利用姿势☆1,034Jan 3, 2025Updated last year
- Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描☆1,118Sep 16, 2023Updated 2 years ago
- Poc and Exp☆1,240Dec 8, 2025Updated 4 months ago
- 一个有点好用的信息收集工具。A somewhat useful information gathering tool.☆1,192Dec 17, 2024Updated last year
- 六大云存储，泄露利用检测工具☆1,250Mar 28, 2025Updated last year
- 致力于收集Goby PoC，请勿用于非法操作，后果自负。☆246Sep 21, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- shiro综合利用工具☆650Apr 15, 2023Updated 2 years ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆452Jun 14, 2022Updated 3 years ago
- 收集、整理、修改互联网上公开的漏洞POC☆973Jul 27, 2025Updated 8 months ago
- 用于生成各类免杀webshell☆1,295Jan 8, 2026Updated 3 months ago
- Redis 漏洞利用工具☆940Jan 26, 2025Updated last year
- Spring漏洞综合利用工具☆674Jul 5, 2023Updated 2 years ago
- 一款集成高危漏洞exp的实用性工具☆1,297Nov 6, 2024Updated last year
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,473Apr 25, 2024Updated last year
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,121Apr 1, 2026Updated last week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.☆4,902Mar 23, 2026Updated 2 weeks ago
- SpringScan 漏洞检测 Burp插件☆607Nov 14, 2023Updated 2 years ago
- 红队笔记☆2,130Mar 16, 2026Updated 3 weeks ago
- shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack☆2,444Mar 28, 2026Updated last week
- superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。☆1,436Dec 16, 2024Updated last year
- 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN…☆3,524Dec 18, 2022Updated 3 years ago
- netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）☆2,214Jul 25, 2023Updated 2 years ago
- 非常专业的漏洞POC管理、团队授权化漏洞管理、漏洞验证利 用、漏洞批量利用框架。☆245Jan 19, 2023Updated 3 years ago
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red)，Alphalog与传统DNSLog不同，更快、更安全。☆457Aug 20, 2025Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- 致远OA综合利用工具☆419Jun 3, 2021Updated 4 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,016May 21, 2024Updated last year
- An integrated BurpSuite vulnerability detection plug-in.☆1,472Jan 29, 2026Updated 2 months ago
- WebSocket 内存马/Webshell，一种新型内存马/WebShell技术☆1,493Apr 10, 2023Updated 3 years ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,266Jan 30, 2022Updated 4 years ago
- EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具☆3,460Apr 2, 2024Updated 2 years ago
- 记录实战中的各种sql注入绕过姿势☆667Sep 7, 2022Updated 3 years ago