1934 matches found
FastjsonSecurity
fastjson 1.2.661.2.83 @JSONType 注解远程代码执行漏洞的测试复现环境。...
WEB脚本漏洞挖掘机
WEB脚本漏洞挖掘机:自动检测 Web 脚本漏洞，支持 PHP/JS/Python/Java 等 30 种文件类型，内置 46 条审计规则。...
everything-claude-code
完整的 Claude Code 配置集合——涵盖智能体、技能、钩子、命令、规则及 MCPs。源自 Anthropic 黑客松获胜者的经实战检验配置。...
Exploit for Uncontrolled Resource Consumption in Microsoft
CVE-2026-49160 与 CVE-2026-47291：HTTP.sys 相关漏洞的验证代码...
PeneTestAgent
使用Agent对网站进行漏洞测试...
ctf-skills
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more...
poc-lab
Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more...
exploitarium
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've alway...
pikachu
Web漏洞练习靶场，包含SQL注入、XSS、文件上传等漏洞场景...
nuclei-templates
模板...
exploitarium
公开0DAY...
nuclei-templates
No description...
tomato-rc-qos-ppp-cve
Tomato by Shibby 1.28.0000 MIPSR2-124 K26 Mini - sbin/rc QoS + PPP Command Injection 3 CVEs, CWE-78...
AWSGateKeeper
AWS 安全审计网关 — GuardDuty 威胁响应、Inspector CVE 扫描、Detective 根因分析、IAM 角色自动化治理、通配符策略实时检测、事件驱动的事件响应与动态 IAM 隔离、SIEM 转发。可部署为 AWS Lambda 函数或端口 8000 上的独立 HTTP 服务器。...
exploitdb
漏洞库...
漏洞利用链自动构建程序
可自动提取CVE标准.json格式漏洞作为数据源自动生成漏洞利用链...
auto-test-platform
自动化测试平台-用于POC测试团队...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
海卫系列首款安全工具 电鳗（CVE-2026-31431 专项防护） 功能模块命名： ● 扫描检测：电鳗之眼（精准识别漏洞痕迹） ● 临时热修复：电鳗之盾（快速阻断攻击路径） ● 驻留防御：电鳗之网（持续监控系统状态） ● 修复建议：电鳗智库（提供专业修复方案与风险提示）...
claude-code-guide
No description...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
Copy-Fail-CVE-2026-31431-Linux-exp-tools-C-EXP CVE-2026-31431 Copy Fail Linux内核提权漏洞 - C语言版本地提权EXP 微信公众号：挽风安全...
LeakValue
No description...
sinatra
Classy web-development dressed in a DSL official / canonical repo...
PoC
No description...
ctf-skills
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more...
LyInjector
一款功能强大的应用层反汇编代码注入器，实现了DLL注入，ShellCode注入等功能，是一款不错的后渗透利器。 A powerful application layer disassembly code injector that implements DLL injection, ShellCode injection, and other functions, is a good post penetration tool...
AlliN
A flexible scanner...
TrafficEye
该工具适用于 HW 蓝队对网络流量的深入分析，帮助安全研究人员、渗透测试人员及网络管理员等专业人士识别潜在的安全威胁，尤其是针对 Web 应用的攻击（如 SQL 注入、XSS、WebShell 等）。其模块化设计使用户能够根据实际需求自由选择并定制各类功能模块。 This tool is designed to help penetration testers and network administrators identify potential security threats, especially those targeting web applications such as...
nuclei-templates
No description...
nuclei-templates
No description...
Pocsuite
Pocsuite 是知道创宇安全研究团队打造的一款开源的远程漏洞测试框架，Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team...
claude-code-guide
No description...
pocsuite3
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team...
PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE with colors...
pwntools
CTF framework and exploit development library...
青龙面板poc与exp
青龙面板认证绕过漏洞poc与exp...
commix
Automated All-in-One OS Command Injection Exploitation Tool...
metasploit-framework
Metasploit Framework...
metasploit-framework
Metasploit Framework...
agent-security-guide
本项目提供针对OpenClaw平台的AI Agent安全治理方案，解决AI Agent权限失控、风险难量化、治理难落地、合规难满足等核心问题。目标可10分钟完成安全评估，一键加固提升安全评分，提供完整治理工具与指南，帮助您高效满足等保2.0、OWASP等合规要求。...
pocsuite3
No description...
Exploit for Code Injection in Apache Rocketmq
Apache RocketMQ NameServer 任意文件写入漏洞（CVE-2023-37582）漏洞复现POC，java版本 该poc为复现https://github.com/vulhub/vulhub/tree/master/rocketmq/CVE-2023-37582https://gitee.com/link?target=https%3A%2F%2Fgithub.com%...
nuclei-templates
nuclei templates...
Exploit for CVE-2024-23700
Mirror https://github.com/canyie/CVE-2024-23700...
claude-code-guide
No description...
V-APF
V-APF 是一款机器学习驱动的自动化 Web 安全检测框架。通过对 Web 页面在“基线请求 vs. 探测请求”间的语义指纹差异进行量化，结合随机森林 Random Forest模型，自动识别 SQLi / XSS 等漏洞并生成报告。...
sploitfun-linux-x86-exp-tut
SploitFun Linux x86 Exploit 开发系列教程...
nuclei-templates1
No description...
nuclei-templates
No description...
漏洞扫描系统
This is a Python web application built using the Flask framework, designed to scan Windows systems for vulnerabilities. The application has several features, including user authentication, task management, and vulnerability scanning. Here is a summary of the key points: User Authentication The...
awesome-burp-extensions
This is a curated list of Burp Extensions, a collection of user-submitted plugins for the Burp Suite web application security testing tool. The repository is maintained under a CC0 1.0 Universal license, allowing for the permanent relinquishment of copyright and related rights to the works...