Pre-Built Vulnerable Environments Based on Docker-Compose
对 The Hacker Playbook 3 的翻译。
vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...
这是一个用于IP和域名碰撞匹配访问的小工具,旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。
WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
CVE-2019-3396 confluence SSTI RCE
使用GitHub API 搭建一个可动态发布文章的博客
Curated list of public penetration test reports released by several consulting firms and academic security groups
WDScanner平台目前实现了如下功能:分布式web漏洞扫描、客户管理、漏洞定期扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署、密码定向破解、社工库查询等功能。
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.