{"id":13842343,"url":"https://github.com/jweny/pocassist","last_synced_at":"2025-10-07T13:30:39.696Z","repository":{"id":39342059,"uuid":"366671705","full_name":"jweny/pocassist","owner":"jweny","description":"傻瓜式漏洞PoC测试框架","archived":true,"fork":false,"pushed_at":"2023-10-30T10:58:27.000Z","size":43949,"stargazers_count":1432,"open_issues_count":28,"forks_count":245,"subscribers_count":28,"default_branch":"master","last_synced_at":"2024-10-01T21:23:18.205Z","etag":null,"topics":["cve","penetration-testing-poc","poc","pocassist","security","security-tools","vulnerability","vulnerability-scanners"],"latest_commit_sha":null,"homepage":"https://pocassist.jweny.top/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jweny.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-05-12T10:05:09.000Z","updated_at":"2024-09-23T03:20:54.000Z","dependencies_parsed_at":"2024-06-18T18:51:03.630Z","dependency_job_id":null,"html_url":"https://github.com/jweny/pocassist","commit_stats":null,"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jweny%2Fpocassist","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jweny%2Fpocassist/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jweny%2Fpocassist/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jweny%2Fpocassist/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jweny","download_url":"https://codeload.github.com/jweny/pocassist/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":235633947,"owners_count":19021455,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve","penetration-testing-poc","poc","pocassist","security","security-tools","vulnerability","vulnerability-scanners"],"created_at":"2024-08-04T17:01:32.536Z","updated_at":"2025-10-07T13:30:34.629Z","avatar_url":"https://github.com/jweny.png","language":"Go","funding_links":[],"categories":["漏洞扫描","Go","其他_安全与渗透"],"sub_categories":["网络服务_其他"],"readme":"![pocassist](https://socialify.git.ci/jweny/pocassist/image?description=1\u0026descriptionEditable=%E5%85%A8%E6%96%B0%E7%9A%84%E5%BC%80%E6%BA%90%E6%BC%8F%E6%B4%9E%E6%B5%8B%E8%AF%95%E6%A1%86%E6%9E%B6%EF%BC%8C%E5%AE%9E%E7%8E%B0poc%E5%9C%A8%E7%BA%BF%E7%BC%96%E8%BE%91%E3%80%81%E8%BF%90%E8%A1%8C%E3%80%81%E6%89%B9%E9%87%8F%E6%B5%8B%E8%AF%95\u0026font=Inter\u0026forks=1\u0026issues=1\u0026language=1\u0026logo=https%3A%2F%2Favatars1.githubusercontent.com%2Fu%2F26767398\u0026owner=1\u0026pattern=Floating%20Cogs\u0026pulls=1\u0026stargazers=1\u0026theme=Dark)\n\npocassist是一个 Golang 编写的全新开源漏洞测试框架。\n\n- 简单易用\n  - 只需要在前端编辑，即可生成poc对批量目标进行测试\n  - 单二进制文件，无依赖，也无需安装\n- 性能优秀\n  - 支持高并发，多重并发控制，通过使用 `ants`实例化协程池，复用 goroutine\n  - 多重内存复用，尽可能小的内存占用\n- 规则体系\n  - 完全兼容xray，但又不仅仅是xray。除了支持定义目录级漏洞poc，还支持服务器级漏洞、参数级漏洞、url级漏洞以及对页面内容检测，如果以上还不满足你的需求，还支持加载自定义脚本。\n\n使用之前务必先阅读使用文档！\n\n🏠[使用文档](https://pocassist.jweny.top/)\t⬇️[下载最新版本](https://github.com/jweny/pocassist/releases)\n\n## 快速开始\n\n### 像数 1, 2, 3 一样容易\n\n```bash\n# 启动服务\n./pocassist\n\n# 浏览器访问 \nhttp://127.0.0.1:1231\n```\n\n建议使用[pocassistdb](https://github.com/jweny/pocassistdb)作为漏洞库。⬇️[下载漏洞库最新版本](https://github.com/jweny/pocassistdb/releases/)，并在`config.yaml `的`sqlite`项配置路径。\n\n## Demo\n\n登录页\n\n![登录页](docs/pic/登录页.jpg)\n\n规则首页\n\n![规则首页](docs/pic/规则首页.jpg)\n\n规则详情\n\n![规则详情](docs/pic/规则详情.jpg)\n\n支持一键导入xray规则\n\n![upload-yaml](docs/pic/yaml.gif)\n\n单条规则靶机测试\n\n![单条规则靶机测试](docs/pic/单条规则靶机测试.png)\n\n漏洞描述首页\n\n![漏洞描述首页](docs/pic/漏洞描述首页.jpg)\n\n漏洞描述详情\n\n![漏洞描述详情](docs/pic/漏洞描述详情.png)\n\n新建批量扫描任务\n\n![新建扫描任务](docs/pic/新建扫描任务.png)\n\n任务状态\n\n![任务首页](docs/pic/任务首页.png)\n\n扫描结果\n\n![扫描结果](docs/pic/扫描结果.jpg)\n\n结果首页\n\n![结果首页](docs/pic/结果首页.jpg)\n\n组件首页\n\n![组件首页](docs/pic/组件首页.jpg)\n\n## 常见问题\n\n1. 自定义配置。pocassist首次运行时将在当前目录生成`config.yaml`，引擎启动后实时监控配置文件变化，配置文件修改后无需重启，即热加载\n2. 用户名密码错误：检查数据库配置，以及数据库auth表。建议使用[pocassistdb](https://github.com/jweny/pocassistdb)作为漏洞库\n5. 支持前后端分离部署。前端源码、nginx配置示例可参考[pocassistweb](https://github.com/jweny/pocassistweb)\n4. 其他使用问题请先阅读[使用文档](https://pocassist.jweny.top/)\n\n\n## 免责声明\n\n未经授权，使用pocassist攻击目标是非法的。pocassist仅用于安全测试目的。为避免被恶意使用，本项目所有收录的poc均为漏洞的理论判断，不存在漏洞利用过程，不会对目标发起真实攻击和漏洞利用。\n\n## 404StarLink 2.0 - Galaxy\n\n![](https://github.com/knownsec/404StarLink-Project/raw/master/logo.png)\n\npocassist 是 404Team [星链计划2.0](https://github.com/knownsec/404StarLink2.0-Galaxy) 中的一环，如果对 pocassist 有任何疑问又或是想要找小伙伴交流，可以参考星链计划的加群方式。\n\n- [https://github.com/knownsec/404StarLink2.0-Galaxy#community](https://github.com/knownsec/404StarLink2.0-Galaxy#community)\n\n## Stargazers\n\n如果您觉得本项目对您有所帮助，请不要吝啬一个⭐哦！\n\n[![Stargazers over time](https://starchart.cc/jweny/pocassist.svg)](https://starchart.cc/jweny/pocassist)\n\n## 参考项目\n\n- https://github.com/chaitin/xray/tree/master/pocs\n- https://phith0n.github.io/xray-poc-generation/\n- https://github.com/jjf012/gopoc\n- https://codelabs.developers.google.com/codelabs/cel-go#0\n- https://github.com/projectdiscovery/nuclei\n- https://github.com/projectdiscovery/nuclei-templates/\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjweny%2Fpocassist","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjweny%2Fpocassist","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjweny%2Fpocassist/lists"}