oob 开源项目推荐（53 个）

projectdiscovery /interactsh

一个用于收集 OOB 交互的服务器和客户端库

luisfontes19 /xxexploiter

Tool to help exploit XXE vulnerabilities

Li4n0 /revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

dell /redfish-ansible-module

用于带外控制器的 Ansible 模块，使用 Redfish API

quadsproject /badfish

用于通过 Redfish API 管理裸机系统的厂商无关工具

ztgrace /mole

Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.

unlock-security /sqlmapsh

SQLMap wrapper that lets you use Interact.sh as a DNS server for exfiltrating data with zero configuration

ixs /kvm-cli

Commandline interface to start IPMI/OOB KVM interfaces

kabiri-labs /rcekit

Test a URL, a captured HTTP request or a multi-step chain for RCE—and know what the evidence actually proves. 11 methods, from command injection and SSTI to argument injection and file inclusion. Every verdict says what the target did, and a run that tested nothing is never called clean. Burp/ffuf/Nuclei exports. One Python file, no dependencies.

MicrochipTech /PIC32MZW1_Curiosity_OOB

"IoT Made Easy!" - OOB demo collateral for PIC32MZW1 Curiosty board

MicrochipTech /PIC32MZW1_Workshop

"IoT Made Easy!" - Guided System Development to learn PIC32MZ W1 Family Device

ErenElagz /Football-Manager-Game

A concise yet thorough text‑based football manager game built in Python, using object‑oriented design. Players manage a team over a 38‑week season, choose among multiple strategies (e.g. aggressive, defensive), and compete in a league with realistic match outcomes, league standings, and tactical depth.

MicrochipTech /WFI32-IoT

"IoT Made Easy!" - OOB demo collateral for WFI32-IoT board

KhaledAshrafH /SQGen

This project demonstrates the use of inheritance, templates and exceptions in C++ to implement two generic data structures: stacks and queues.

xcanwin /pyoob

基于Python的轻量级Netcat服务器，用于接收HTTP、OOB、SSRF等多种请求，同时监听TCP与UDP两种协议，并且可以持续获取结果，有日志记录功能。

ixs /kvm_access

Docker container with NoVNC, Palemoon, Flash and JRE8 (Webstart/Apple) for KVM Access to legacy hardware

raminfp /symbolic_execution_fuzzing

symbolic execution fuzzing with KLEE

TrebledJ /moss

Multifunctional server with an offensive toolkit: OAST, Exfiltration, Pastebin, Automation, XSS Post-Exploitation, Honeypot

C00LN3T /Spring4Shell

A vulnerability scanner and exploitation framework targeting Spring, GraphQL, and React Server Components (RSC) stacks. Features dynamic WAF evasion, passive/active auditing, Out-of-Band (OOB) verification, and multi-format enterprise reporting. Built for security researchers and authorized penetration testers.

Coopydood /nano95

Instant, one-click working base install of Windows 95 in a zip less than 50MB.