常见的未授权漏洞检测
☆278Apr 5, 2025Updated last year
Alternatives and similar repositories for unauthorized
Users that are interested in unauthorized are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 未授权检测的命令行版，支持批量检测☆158Apr 5, 2025Updated last year
- 一款java漏洞集合工具☆1,152Jan 13, 2026Updated 9 months ago
- Struts2漏洞扫描 Burp插件☆133Mar 21, 2023Updated 3 years ago
- An integrated BurpSuite vulnerability detection plug-in.☆1,566Jul 20, 2026Updated 3 months ago
- 一款集成高危漏洞exp的实用性工具☆1,314Nov 6, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 高危漏洞利用工具☆1,830Feb 12, 2025Updated last year
- 红队批量脆弱点搜集工具☆333Jun 6, 2023Updated 3 years ago
- OA综合利用工具，集合将近20款OA漏洞批量扫描☆1,344Oct 28, 2023Updated 3 years ago
- ☆628Nov 27, 2023Updated 2 years ago
- WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）☆1,807Nov 1, 2023Updated 3 years ago
- java-impacket-gui☆141Sep 8, 2023Updated 3 years ago
- Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。☆1,279Apr 10, 2026Updated 6 months ago
- Spring漏洞综合利用工具☆676Jun 26, 2026Updated 4 months ago
- Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件☆1,335Jul 10, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 密码字典生成工具，加微信进群及时接收更新信息☆283Apr 21, 2024Updated 2 years ago
- HeapDump敏感信息提取工具☆1,701Aug 20, 2026Updated 2 months ago
- Web漏洞扫描工具XRAY的GUI启动器☆1,317May 19, 2023Updated 3 years ago
- 一款针对Shiro550漏洞进行快速漏洞利用工具。 对 @SummerSec 大佬的项目https://github.com/SummerSec/ShiroAttack2 进行了一些改进。☆250May 29, 2023Updated 3 years ago
- superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。☆1,435Dec 16, 2024Updated last year
- 一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。☆676Oct 9, 2026Updated 3 weeks ago
- DudeSuite Web Security Tools☆1,337Aug 10, 2026Updated 2 months ago
- 一款集成了多种老牌工具字典的轻量级目录扫描器，包括御剑后台扫描字典，test404网站备份，web破壳扫描器，御剑1.5扫描字典，御剑专业版字典，wwwscan字典，dirscan字典，dirsafe字典，swebscan☆131May 7, 2023Updated 3 years ago
- EHole(棱洞)魔改。可对路径进行指纹识别；支持识别出来的重点资产进行漏洞检测(支持从hunter和fofa中提取资产)支持对ftp服务识别及爆破☆973Mar 6, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- (持续更新)本项目为存储团队Bot小K每日监测到的最新POC，EXP，以及自己平时总结的POC，为了方便渗透测试过程中，漏洞查询，脱网环境的渗透测试。☆283Apr 22, 2024Updated 2 years ago
- EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测 工具☆3,516Apr 2, 2024Updated 2 years ago
- shiro反序列化漏洞综合利用（仅限授权测试使用）☆2,639Jun 4, 2026Updated 4 months ago
- 攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。☆1,471Oct 3, 2024Updated 2 years ago
- Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含☆258Nov 15, 2022Updated 3 years ago
- Redis 漏洞利用工具☆940Jan 26, 2025Updated last year
- ip域名反查、权重查询以及ICP备案查询。便于提交SRC时资产过滤。☆178Mar 30, 2023Updated 3 years ago
- 一个半自动化springboot打点工具， 内置目前springboot所有漏洞☆791Sep 30, 2025Updated last year
- 【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022…☆1,245Feb 26, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗☆1,683Jan 19, 2023Updated 3 years ago
- 爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应☆765Jul 20, 2023Updated 3 years ago
- MDUT - Multiple Database Utilization Tools☆2,288Updated this week
- A Security Tool for Bug Bounty, Pentest and Red Teaming.☆4,452Updated this week
- Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。☆1,427Apr 14, 2026Updated 6 months ago
- ☆175Oct 8, 2024Updated 2 years ago
- 自研JavaFX图形化漏洞扫描工具，支持扫描的漏洞分别是： ThinkPHP-2.x-RCE， ThinkPHP-5.0.23-RCE， ThinkPHP5.0.x-5.0.23通杀RCE， ThinkPHP5-SQL注入&敏感信息泄露， ThinkPHP 3.x 日志泄露…☆470May 9, 2025Updated last year