Alternatives and similar repositories for YApi-Exploit:

Users that are interested in YApi-Exploit are comparing it to the libraries listed below

• woodpecker-appstore / java-memshell-generator
  Java 内存马生成插件
  ☆50Updated last year
• woodpecker-appstore / springboot-vuldb
  ☆68Updated 3 years ago
• SummerSec / LookupInterface
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆163Updated 3 years ago
• hosch3n / FastjsonVulns
  [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
  ☆90Updated 2 years ago
• Firebasky / GoRmi
  该项目是通过go语言实现防止rmi利用被反置的问题。
  ☆44Updated 3 years ago
• SummerSec / BlogPapers
  <a href="sumsec.me"><img src="https://readme-typing-svg.demolab.com?font=Fira+Code&size=24&pause=1000&color=FDFDFD&background=13797800&ce…
  ☆53Updated this week
• bitterzzZZ / CVE-2021-43297-POC
  CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE
  ☆38Updated 3 years ago
• tangxiaofeng7 / JavaLearning
  Learning JAVA for Security
  ☆31Updated 2 years ago
• ShangRui-hash / bucket-takeover-lab
  子域名接管的几种变体靶场
  ☆23Updated 10 months ago
• zyylhn / redis_rce
  Redis primary/secondary replication RCE
  ☆42Updated 3 years ago
• yumusb / Yapi_Rce
  Yapi RCE漏洞批量验证与伪交互SHELL
  ☆41Updated 3 years ago
• 0xrumble / BytecodeScreen
  ☆50Updated 2 years ago
• OneSourceCat / XxlJob-Hessian-RCE
  XxlJob<=2.1.2配置不当情况下反序列化RCE
  ☆94Updated 4 years ago
• ffadd / JNDIKit
  JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）
  ☆44Updated 3 years ago
• kitezzzGrim / tongda-exp
  python编写的多个通达常见漏洞exp
  ☆38Updated 3 years ago
• Ryze-T / rust-addUser
  windows 添加管理员--Rust版本
  ☆44Updated 2 years ago
• woodpecker-framework / woodpecker-requests
  woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。
  ☆67Updated 2 years ago
• knightswd / NoPacScan
  NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than other script
  ☆87Updated 3 years ago
• H3rmesk1t / Fastjson-Gadgets-Automatic-Scanner
  Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …
  ☆50Updated 3 years ago
• Y4tacker / CTFBackup
  备份下比赛附件
  ☆22Updated 2 years ago
• j2ekim / Security_Service_Interviews
  安服面经☞渗透测试/代码审计/安全研究
  ☆27Updated 2 years ago
• tangxiaofeng7 / Spring-Cloud-Function-Spel
  Spring Cloud Function Spel命令执行漏洞
  ☆38Updated 3 years ago
• Esonhugh / yapi-rce-webshell
  Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小
  ☆65Updated 9 months ago
• ic3s3137 / sssthief
  窃取当前用户的ssh，sudo密码
  ☆69Updated 2 years ago
• wh1t3p1g / tabby-intellij-plugin
  A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily
  ☆34Updated 5 months ago
• Y4tacker / CobaltStrike4.7ServerDocker
  docker运行cs4.7server端
  ☆40Updated 2 years ago
• z1un / NC-BeanShell-RCE
  CNVD-2021-30167 用友NC BeanShell远程代码执行
  ☆30Updated 3 years ago
• 0linlin0 / Java
  java
  ☆54Updated 2 years ago
• turn1tup / JvmRaspBypass
  ☆14Updated 2 years ago
• She11Way / eval2term
  连接eval一句话webshell，获得可交互的虚拟终端
  ☆97Updated 2 years ago