5z1punch / AutoTypeDiscovery
fastjson auto type derivation search
☆21Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for AutoTypeDiscovery
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated last year
- CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE☆38Updated 2 years ago
- Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…☆52Updated 3 years ago
- jre8u20 gadget☆33Updated 3 years ago
- ☆33Updated 2 years ago
- ☆28Updated 3 years ago
- ☆41Updated 5 years ago
- 就是一个练习RMI反序列化的最简单环境☆30Updated 2 years ago
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性☆14Updated 4 months ago
- Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …☆50Updated 2 years ago
- 手把手教你写IAST系列☆24Updated 10 months ago
- Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information …☆15Updated last year
- TongASDP漏洞测试环境☆34Updated last year
- CVE-2020-4464 / CVE-2020-4450☆32Updated 3 years ago
- Celestion 是一个无回显漏洞测试辅助平台，平台使用flask编写，提供DNSLOG，HTTPLOG等功能。 (界面懒得弄，后续有需要再说)。☆30Updated last year
- 编译原理学习代码仓库☆23Updated 2 years ago
- PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.☆62Updated 2 years ago
- CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process…☆25Updated 3 years ago
- mvn clean package -DskipTests☆45Updated last year
- 魔改debugfs，应急溯源版本☆23Updated last year
- ☆14Updated 2 years ago