Alternatives and similar repositories for penework

Users that are interested in penework are comparing it to the libraries listed below

• havysec / vulnerable-scene
  一些漏洞场景的还原，基于https://www.exploit-db.com/
  ☆37Updated 7 years ago
• shengqi158 / S2-055-PoC
  S2-055的环境，基于rest-show-case改造
  ☆37Updated 7 years ago
• jasonsheh / FingerScan
  ☆14Updated 7 years ago
• JutaZhu / KWP
  Keyboard Weak Password
  ☆28Updated 9 years ago
• brianwrf / S2-057-CVE-2018-11776
  A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)
  ☆16Updated 7 years ago
• brianwrf / myPadBuster
  It is a Python+Perl script to exploit ASP.net Padding Oracle vulnerability.
  ☆18Updated 9 years ago
• coffeehb / DNS-Monitor
  ☆16Updated 7 years ago
• leveryd / sqlmap_celery
  分布式的sqlmapapi
  ☆11Updated 9 years ago
• cflq3 / ark
  分布式扫描框架
  ☆61Updated 9 years ago
• haibara3839 / CVE-2017-0199-master
  CVE-2017-0199
  ☆16Updated 8 years ago
• niexinming / safe_tool
  safe_tools
  ☆26Updated 7 years ago
• imp0wd3r / dz-cache-ssrf-codeexec
  Discuz!利用SSRF+缓存应用代码执行漏洞环境搭建及验证脚本
  ☆18Updated 9 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆106Updated 6 years ago
• monsterzer0 / SRCMS
  Enterprise Security Response Center Development Framework
  ☆11Updated 8 years ago
• Wyc0 / DNSLog
  DNS log http://zone.wooyun.org/content/27119
  ☆21Updated 9 years ago
• lcatro / XSS-hunter
  XSS hunter 收集Webview 页面上存在的反射,储存型XSS ,方便应急APP 和前端页面在发布时遇到XSS 安全问题..
  ☆42Updated 8 years ago
• lcatro / browser_xss_auditor_fuzzing
  浏览器XSS 过滤器Fuzzing 框架 (browser xss aduit fuzzing framework )..
  ☆15Updated 9 years ago
• brianwrf / S2-053-CVE-2017-12611
  A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)
  ☆37Updated 8 years ago
• riusksk / StrutScan
  Struts2 Vuls Scanner base perl script
  ☆24Updated 9 years ago
• Luffin / CVE-2017-10271
  CVE-2017-10271 POC
  ☆29Updated 7 years ago
• genxor / CVE-2018-1270_EXP
  ☆18Updated 7 years ago
• BlackHole1 / Fastener
  Web版webshell
  ☆12Updated 7 years ago
• ct0p5 / HighRiskPort
  总结一些渗透中值得关注的默认端口
  ☆23Updated 9 years ago
• fate0 / pastebot
  一个监控 pastebin 的敏感内容，并发微博的 bot
  ☆15Updated 8 years ago
• BugScanTeam / BugRequest
  Sniffer vulnerabilities in http request (chrome extension)
  ☆20Updated 8 years ago
• lcatro / cross_domain_postmessage_vuln_dig
  WEB 跨域postMessage() 漏洞挖掘工具,基本原理:使用AJAX 获取页面代码,结合iframe 和data 协议构造测试环境,然后在iframe 下的window.onmessage 中插入hook 监控onmessage 的参数,最后通过能否被原来的onme…
  ☆11Updated 9 years ago
• BofengDuke / Attacker
  基于zoomeye的思路制作的小型空间引擎及攻击模型
  ☆16Updated 8 years ago
• aipengjie / vulscans
  check cmd execute
  ☆13Updated 8 years ago
• pwntester / XMLDecoder
  RCE Exploit PoC for XMLDecoder
  ☆63Updated 12 years ago
• 0xa-saline / htcap_mysql
  修改htcap的数据库为mysql
  ☆24Updated 8 years ago