Alternatives and similar repositories for POC

Users that are interested in POC are comparing it to the libraries listed below

• YoungRichOG / WhoisSubdomain
  通过Whois信息发现更多与目标有关联的域名，扩大攻击面
  ☆14Updated 3 years ago
• Conanjun / passive-scan-client-and-sendto
  burp被动扫描自动转发和手动重发插件
  ☆51Updated 5 years ago
• chroblert / JC-AntiToken
  burp插件：python版，token防重放绕过
  ☆21Updated 4 years ago
• Binye234 / What_Cms_Auto_Poc
  ☆25Updated 5 years ago
• xinxin999 / Exp-collect
  ☆29Updated 4 years ago
• pochubs / Log4j2Scan-1
  Log4j2 RCE Passive Scanner plugin for BurpSuite
  ☆35Updated 3 years ago
• sv3nbeast / X-AutoXray
  AutoScan 有多个目标时，多线程调用xray+rad进行自动扫描
  ☆88Updated 3 years ago
• feihong-cs / Attacking_Shiro_with_CVE_2020_2555
  ☆49Updated 4 years ago
• cyal1 / host_scan
  这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go
  ☆114Updated 3 years ago
• r00tuser111 / SerializationDumper-Shiro
  基于SerializationDumper的Shiro Cookie序列化数据解密小工具
  ☆53Updated 5 years ago
• BetterDefender / SpringBootScan
  扫描网站是否存在SpringBoot API信息泄漏或阿里云存储OSSKEY泄漏
  ☆19Updated 2 years ago
• cckuailong / YarnRpcRCE
  ☆82Updated 3 years ago
• acgbfull / Apache_Shiro_1.2.4_RCE
  Apache shiro <= 1.2.4 rememberMe 反序列化漏洞利用工具
  ☆21Updated 5 years ago
• geeeez / Struts2-Scan
  Struts2全漏洞扫描利用工具
  ☆22Updated 5 years ago
• potats0 / CasExp
  Apereo CAS exploit tool
  ☆58Updated 3 years ago
• kuiguansec / rcetool
  rce工具
  ☆27Updated 4 years ago
• sv3nbeast / weblogic-framework
  weblogic-framework
  ☆45Updated 3 years ago
• TheKingOfDuck / Copy2Java
  一键生成Java代码的burp插件/Generate Java script for fuzzing in Burp。
  ☆50Updated 3 years ago
• Afant1 / JavaSearchTools
  ☆61Updated 5 years ago
• sunird / e-cology-poc
  泛微OA e-cology rce批量检测工具
  ☆33Updated 6 years ago
• Slzdude / jumpserver_rce
  ☆82Updated 4 years ago
• Echox1 / ShiroExploit
  ☆38Updated 4 years ago
• m09046105 / xiaoyi
  自动批量检测java相关组件的rce漏洞，包括weblogic、struts2、shiro
  ☆19Updated 5 years ago
• guguyu1 / tomcat_password
  tomcat 图形化弱口令爆破 也可以作为401认证爆破
  ☆14Updated 4 years ago
• woodpecker-appstore / rmi-deserialization-vuldb
  Java RMI反序列化漏洞插件
  ☆49Updated 4 years ago
• maybe-why-not / upload_waf_filename_bypass
  ☆11Updated 3 years ago
• freeFV / Tencent_Yun_tools
  ☆37Updated 3 years ago
• wuppp / releaseBehinderShell
  卸载冰蝎内存马
  ☆68Updated 4 years ago
• anneviliu / awvs_xray_url_batch-import
  用于解决awvs和xray联动时url批量导入并扫描的小脚本
  ☆16Updated 5 years ago
• 7dog7 / RuleSubDomain
  规则组合子域名字典生成
  ☆29Updated 5 years ago