A GitHub repository collecting the latest vulnerability POCs in Yaml and Python.
Pilot-Web is a web-based penetration testing and vulnerability exploitation platform developed with Python Flask.
sdlc is a security vulnerability management platform built with Go, promoting DevSecOps and secure development practices.
自动化漏洞扫描系统,方便安全测试人员在测试过程中,快速对网站进行信息收集、漏洞扫描。
Tiger是一款在攻防演练中对目标资产重点系统指纹识别、精准漏扫的工具。
A tool for vulnerability scanning based on system fingerprint recognition for various CMS.
Chunsou is a multi-threaded web fingerprint recognition tool written in Python3 for security testing.
ysoserial is a graphical tool for detecting gadgets, classes, command execution, and bytecode loading.
A Java implementation for crafting OpenWire protocol exploits targeting ActiveMQ for remote code execution vulnerabilities.
A practical Web shooting range integrating multiple languages to aid in penetration testing and code auditing.
Shikata ga nai encoder ported into Go with improvements for generating undetectable binary payloads.
用友漏洞综合利用工具 for security research and vulnerability exploitation.