0730Nophone / CVE-2022-22947-Links
Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） 注入哥斯拉内存马
☆57Updated 3 years ago
Alternatives and similar repositories for CVE-2022-22947-
Users that are interested in CVE-2022-22947- are comparing it to the libraries listed below
Sorting:
- 基于ysoserial扩展命令执行结果回显，生成冰蝎内存马☆91Updated 2 years ago
- 用于windows反弹shell的yaml-payload☆71Updated 4 years ago
- 一键出网探测工具☆73Updated 2 years ago
- Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit☆83Updated 2 years ago
- 泛微 eoffice10 前台 getshell☆59Updated 3 years ago
- Shiro文件上传工具☆100Updated 2 years ago
- cs免杀上线☆59Updated 3 years ago
- 域内密码喷射工具☆131Updated 3 years ago
- 用友NC反序列化漏洞payload生成☆73Updated 3 years ago
- ☆44Updated 3 years ago
- Java命令行文件监控小工具(代码审计)☆104Updated 4 years ago
- 本工具的定位是快速生成Java安全相关的Payload，如内存马、反序列化链、JNDI url、Fastjson等，动态生成相关Payload，并附带相应的文档。☆93Updated 10 months ago
- Java 内存马生成插件☆54Updated 2 years ago
- 一键获取nacos中的配置文件信息和绘制密码本☆121Updated last year
- Auto-JSPwebshell/jsp免杀/webshell免杀/自动生成☆25Updated 3 years ago
- ☆50Updated 2 years ago
- SpringBoot获取被星号脱敏的密码的明文☆58Updated 4 years ago
- 一个能够利用MSSQL的xp_cmdshell功能来进行流量代理的脚本，用于在站酷分离且不出网SQL注入进行代理☆105Updated 3 years ago
- 组合利用泛微信息泄漏漏洞和任意用户登录漏洞，可获取全部loginId并测试登录☆59Updated 2 years ago
- 某软最新公开gadgegt,新加入不出网利用。☆84Updated last year
- 一款探测fastjson漏洞的BurpSuite插件☆61Updated 3 years ago
- 应对渗透中极限环境下命令回显 & 文件落地☆132Updated 3 years ago
- 自己积累的一些Java反序列化利用链☆90Updated 2 years ago
- ☆122Updated 2 years ago
- CVE-2021-44228，log4j2 burp插件 Java版本，dnslog选取了非dnslog.cn域名☆32Updated 4 years ago
- Yonyou-UNSERIALIZE,用友NC 反序列化检查工具,批量检测用友NC 反序列化☆50Updated 2 years ago
- 一款办公应用云凭证利用工具☆98Updated last year
- 如何将Java反序列化Payload极致缩小☆66Updated 3 years ago
- MemShell List☆88Updated 2 years ago
- woodpecker 漏洞插件开发的简单示范，用于插件的快速上手☆27Updated 4 years ago