Al1ex / CVE-2020-36179

Related projects ⓘ

Alternatives and complementary repositories for CVE-2020-36179

• Y4er / CVE-2020-14756
  WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar
  ☆79Updated 3 years ago
• Afant1 / RemoteObjectInvocationHandler
  bypass JEP290 RaspHook code
  ☆62Updated 4 years ago
• jas502n / SpringBoot_Actuator_RCE
  SpringBoot_Actuator_RCE
  ☆96Updated 4 years ago
• kingkaki / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆101Updated 4 years ago
• potats0 / cve_2020_14644
  ☆70Updated 4 years ago
• LandGrey / xxe-ftp-server
  xxe oob receive file via web and ftp server
  ☆95Updated 4 years ago
• TheKingOfDuck / paramFuzzer
  一款高效的参数fuzz工具|A faster param fuzzing test tool
  ☆99Updated 4 years ago
• iSafeBlue / redis-rce
  Redis RCE 的几种方法
  ☆90Updated 5 months ago
• mishmashclone / GrrrDog-Java-Deserialization-Cheat-Sheet
  https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
  ☆49Updated 3 years ago
• Ramos-dev / R9000
  ☆58Updated 4 years ago
• jas502n / xxl-job
  xxl-job RESTful API RCE
  ☆72Updated 3 years ago
• tobechenghuai / Shiro_721_Padding_Oracle_RCE
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆68Updated 5 years ago
• LandGrey / flink-unauth-rce
  exploit Apache Flink Web Dashboard unauth rce on right way by python2 scripts
  ☆89Updated 5 years ago
• shadowsock5 / ysoserial
  mvn clean package -DskipTests
  ☆45Updated last year
• mhaskar / XMLDecoder-payload-generator
  A simple python script to generate XML payloads works for XMLDecoder based on ProcessBuilder and Runtime exec
  ☆149Updated 3 years ago
• rufherg / WebLogic_Basic_Poc
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆94Updated 4 years ago
• wuppp / cve-2021-45232-exp
  ☆78Updated 2 years ago
• zer0yu / BugBounty
  web fuzzing && bug hunter
  ☆59Updated 2 years ago
• theLSA / f5-bigip-rce-cve-2020-5902
  F5 BIG-IP RCE CVE-2020-5902 automatic check tool
  ☆61Updated 4 years ago
• threedr3am / fastjson-blacklist
  打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
  ☆32Updated 4 years ago
• CHYbeta / OddProxyDemo
  ☆185Updated 6 months ago
• iSafeBlue / fastjson-autotype-bypass-demo
  fastjson 1.2.68 版本 autotype bypass
  ☆140Updated 2 years ago
• hayasec / reGeorg-Weblogic
  reGeorg的特殊版本，适用于老版本weblogic。
  ☆153Updated 4 years ago
• 0xzmz / burpsuite_jsapi
  A BurpSuite extension written by Python,used to find API interface in JS file.
  ☆114Updated last year
• Y4er / javaagent-tomcat-memshell
  使用java agent反序列化注入内存shell
  ☆67Updated 4 years ago