White-hua/Apt_t00ls

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1828 stars · 244 forks observed · 2026-10-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Java-based exploitation tool that aggregates proof-of-concept and weaponized exploits for high-severity vulnerabilities in Chinese enterprise software, including OA systems (Weaver, Landray, Yonyou, Seeyon, Tongda, Wanhu) and security devices. Many modules deploy webshells (Behinder/Godzilla) or execute system commands directly.

Use cases

• verify RCE vulnerabilities in Chinese OA platforms
• test Weaver e-cology file upload exploits
• exploit Yonyou NC deserialization vulnerabilities
• check Landray OA for known RCEs
• deploy webshells during authorized penetration tests
• detect vulnerable security devices like NGFW

When to choose

• conducting authorized red-team engagements against Chinese enterprise OA software
• verifying whether known high-severity CVEs are exploitable in your environment
• needing a consolidated GUI/CLI toolkit for many vendor-specific exploits

When to avoid

• you lack written authorization to test the target systems
• you need general-purpose vulnerability scanning rather than targeted exploitation
• your targets are non-Chinese enterprise software
• you require a maintained, licensed tool for compliance-sensitive environments

Facets

cli-tool · maturity active

security penetration-testing vulnerability-scanning security penetration-testing developer-tools cross-platform jvm exploitation rce webshell vulnerability-verification oa-systems red-team chinese-software

Member repositories

For agents

markdown · JSON · MCP: product_card(name="White-hua/Apt_t00ls")