pl0m21 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

angelsword

Python3编写的CMS漏洞检测框架

antihoneypot

一个拦截蜜罐XSSI的Chrome扩展

antsword-loader

AntSword 加载器

behinder

“冰蝎”动态二进制加密网站管理客户端

boom

M-SEC

cms-hunter

CMS漏洞测试用例集合

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

d-eyes

D-Eyes为绿盟科技一款检测与响应工具

evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

f-scrack

githack

A `.git` folder disclosure exploit

hawkeye

GitHub 泄露监控系统

http-script-generator

ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

intrigue-core

Discover your attack surface!

juggler

A system that may trick hackers. 一个也许能骗到黑客的系统。

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

micro8

Gitbook

passmaker

可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified

pl0m21.github.io

Zikki's Blog.

recaptcha

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload

serializationdumper

A tool to dump Java serialization streams in a more human readable form.

struts2vulsscantools

Struts2全版本漏洞检测工具

transec

IoV Pentesting OS

vulhub

Docker-Compose file for vulnerability environment

weblogic-shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

wooyun_public

乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xssgun

xss payloads generator

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.