漏洞POC及指纹识别库（更新至2022年12月）

一、部分漏洞截图

二、FOFA搜索指纹关键字

产品	FOFA
Spring	app="vmware-SpringBoot-framework"
Elasticsearch	app="elastic-Elasticsearch"
Splunk	app="splunk-日志分析"
amazon-CloudFront	app="amazon-CloudFront"
ECLIPSE-jetty	app="ECLIPSE-jetty"
Jenkins	app="Jenkins"
UniFi-Network	app="UniFi-Network"
APACHE-ActiveMQ	app="APACHE-ActiveMQ"
RedHat-JBoss-AS	app="RedHat-JBoss-AS"
UNIFI-unifi-摄像头	app="UNIFI-unifi-摄像头"
RedHat-Jboss	app="RedHat-Jboss"
Openfire	app="Openfire"
Oracle-Weblogic_interface_7001	app="Oracle-Weblogic_interface_7001"
vmware-Horizon	app="vmware-Horizon"
AVAYA-IP-Office	app="AVAYA-IP-Office"
Oracle-BEA-WebLogic-Server	app="Oracle-BEA-WebLogic-Server"
致远互联-OA	app="致远互联-OA"
RabbitMQ	app="RabbitMQ"
泛微-协同办公OA	app="泛微-协同办公OA"
APACHE-Solr	app="APACHE-Solr"
CISCO-Umbrella	app="CISCO-Umbrella"
泛微-EMobile	app="泛微-EMobile"
致远A8	app="致远A8"
ManageEngine-ServiceDesk-Plus	app="ManageEngine-ServiceDesk-Plus"
APACHE-Shiro	app="APACHE-Shiro"
APACHE-dubbo	app="APACHE-dubbo"
MyBatis	app="MyBatis"
JEECG	app="JEECG"
Oracle-E-Business-Suite	app="Oracle-E-Business-Suite"
JeeSite	app="JeeSite"
JAMES-Mail-Server	app="JAMES-Mail-Server"
用友-UFIDA-NC	app="用友-UFIDA-NC"
APACHE-hadoop-YARN	app="APACHE-hadoop-YARN"
致远A6	app="致远A6"
citrix-Endpoint-Management	app="citrix-Endpoint-Management"
mobileiron-security-platform	app="mobileiron-security-platform"
泛微-E-Weaver	app="泛微-E-Weaver"
APACHE-Tapestry	app="APACHE-Tapestry"
Struts2	app="Struts2"
vmware-Workspace-ONE-Access	app="vmware-Workspace-ONE-Access"
BROADCOM-Layer7-API-Gateway	app="BROADCOM-Layer7-API-Gateway"
用友-NC-Cloud	app="用友-NC-Cloud"
Map/Reduce	app="Map/Reduce"
CLOUDERA-Hadoop-Hue	app="CLOUDERA-Hadoop-Hue"
NetApp-Cloud-Manager	app="NetApp-Cloud-Manager"
vmware-Carbon-Black-EDR	app="vmware-Carbon-Black-EDR"
Jeeplus	app="Jeeplus"
APACHE-Skywalking	app="APACHE-Skywalking"
APACHE-Zeppelin	app="APACHE-Zeppelin"
SonicWall-Email-Security	app="SonicWall-Email-Security"
apereo-CAS	app="apereo-CAS"
AppDynamics	app="AppDynamics"
vmware-HCX	app="vmware-HCX"
Sophos-Mobile	app="Sophos-Mobile"
vmware-vSphere-Web-Client	app="vmware-vSphere-Web-Client"
vmware-vCenter	app="vmware-vCenter"
CISCO-Integrated-Management-Controller	app="CISCO-Integrated-Management-Controller"
vmware-NSX	app="vmware-NSX"
BROADCOM-CA-SiteMinder	app="BROADCOM-CA-SiteMinder"
BROADCOM-CA-Privileged-Access-Manager	app="BROADCOM-CA-Privileged-Access-Manager"
BROADCOM-Layer7-Live-API-Creator	app="BROADCOM-Layer7-Live-API-Creator"
WALLIX-Access-Manager	app="WALLIX-Access-Manager"
bmc-Discovery	app="bmc-Discovery"
Intland-codeBeamer	app="Intland-codeBeamer"
Micro-Focus-Data-Protector	app="Micro-Focus-Data-Protector"
Dell-Storage-Center	app="Dell-Storage-Center"
DELL-EMC-OpenManage-Enterprise	app="DELL-EMC-OpenManage-Enterprise"
CISCO-Data-Center-Network-Manager	app="CISCO-Data-Center-Network-Manager"
ATLASSIAN-FishEye	app="ATLASSIAN-FishEye"
APACHE-HBase	app="APACHE-HBase"
Digital-Workplace-Universal-Client-18.08.00	app="Digital-Workplace-Universal-Client-18.08.00"
Digital-Workplace-Universal-Client-18.02.00	app="Digital-Workplace-Universal-Client-18.02.00"
Digital-Workplace-Universal-Client-3.5.00	app="Digital-Workplace-Universal-Client-3.5.00"
东方国信云-工业互联网平台	app="东方国信云-工业互联网平台"
Oracle-Enterprise-Performance-Management-System	app="Oracle-Enterprise-Performance-Management-System"
vmware-vRealize-Orchestrator	app="vmware-vRealize-Orchestrator"
Tableau-Server	app="Tableau-Server"
Opencast	app="Opencast"
IBM-Planning-Analytics-Workspace-Configuration	app="IBM-Planning-Analytics-Workspace-Configuration"
AVAYA-Mcu视频会议系统	app="AVAYA-Mcu视频会议系统"
AVAYA-Media-Server	app="AVAYA-Media-Server"
AVAYA-Application-Enablement-Services	app="AVAYA-Application-Enablement-Services"
kafka	app="kafka"
OpenMRS	app="OpenMRS"
amazon-greengrass	app="amazon-greengrass"
TamronOS-IPTV系统	app="TamronOS-IPTV系统"
BROADCOM-Advanced-Threat-Protection	app="BROADCOM-Advanced-Threat-Protection"
用友-ism	app="用友-ism"
vRealize-Operations-Tenant-App	app="vRealize-Operations-Tenant-App"
Oracle-BI-Publisher-Enterprise	app="Oracle-BI-Publisher-Enterprise"
elastic-Elasticsearch-Engineer	app="elastic-Elasticsearch-Engineer"
druid-server	app="druid-server"
ECLIPSE-jetty9	app="ECLIPSE-jetty9"
APACHE-Unomi	app="APACHE-Unomi"
Firehose_SERVICE_MONITORING	app="Firehose_SERVICE_MONITORING"
openNMS-产品	app="openNMS-产品"
JavaMelody	app="JavaMelody"
APACHE-Druid	app="APACHE-Druid"
amazon-QuickSight	app="amazon-QuickSight"
vmware-Horizon-DaaS	app="vmware-Horizon-DaaS"
vmware-vRealize-Operations-Manager	app="vmware-vRealize-Operations-Manager"
vmware-vRealize-Log-Insight	app="vmware-vRealize-Log-Insight"
vmware-Tanzu-Observability	app="vmware-Tanzu-Observability"
APACHE-Storm	app="APACHE-Storm"
APACHE-hadoop-HttpFS	app="APACHE-hadoop-HttpFS"
FORESCOUT-Administration	app="FORESCOUT-Administration"
amazon-CodePipeline	app="amazon-CodePipeline"
Zipkin	app="Zipkin"
vmware-Unified-Access-Gateway	app="vmware-Unified-Access-Gateway"
NACOS	app="NACOS"
APACHE-JSPWiki	app="APACHE-JSPWiki"
JEECMS	app="JEECMS"
OPENCms	app="OPENCms"
vmware-Spring-Batch	app="vmware-Spring-Batch"
CISCO-CloudCenter-Suite	app="CISCO-CloudCenter-Suite"
vmware-Site-Recovery-Manager	app="vmware-Site-Recovery-Manager"
vmware-vRealize-Automation-Appliance	app="vmware-vRealize-Automation-Appliance"
vmware-Identity-Manager	app="vmware-Identity-Manager"
amazon-codebuild	app="amazon-codebuild"
jeewms	app="jeewms"
用友-GRP-U8	app="用友-GRP-U8"
用友-ERP-NC	app="用友-ERP-NC"
致远互联-FE	app="致远互联-FE"
Reactive_Mongo	app="Reactive_Mongo"
APACHE-JMeter	app="APACHE-JMeter"
APACHE-tika	app="APACHE-tika"
Jedis	app="Jedis"
Apache-Log4j-Web	app="Apache-Log4j-Web"
Apache_OFBiz	app="Apache_OFBiz"
BMC-Control-M-Root-CA	app="BMC-Control-M-Root-CA" || title="Control-M Welcome Page"

项目链接下载

1、通过阅读原文，到项目地址下载

2、关注公众号web安全工具库，后台回复：20230104

3、每日抽奖送书

· 推 荐 阅 读 ·

本书从实战角度系统讲解了Python核心知识点以及Python在Web开发、数据分析、网络爬虫、桌面应用等领域的各种应用实践。本书用超过10万行代码、500个案例完美演绎了Python在各个领域的出色表现，每一个案例都拥有详细的实现步骤，带领读者由浅入深系统掌握Python语言的核心以及Python全栈开发的技能。

原文始发于微信公众号（Web安全工具库）：漏洞POC及指纹识别库（更新至2022年12月）