Ape1ron / FastjsonInDeserializationDemo1Links
高版本Fastjson在Java原生反序列化中的利用演示
☆15Updated 6 months ago
Alternatives and similar repositories for FastjsonInDeserializationDemo1
Users that are interested in FastjsonInDeserializationDemo1 are comparing it to the libraries listed below
Sorting:
- 在spring-aop中新发现的反序列化gadget-chain☆48Updated 6 months ago
- 添加Connector内存马与ws内存马检测逻辑☆16Updated 2 years ago
- ☆18Updated 6 months ago
- ☆20Updated 4 months ago
- Tai-e的Web插件☆23Updated last year
- 用于快速启动tabby 分析漏洞或者gadget的环境☆45Updated this week
- 解决先知文件大小限制的问题☆16Updated 11 months ago
- Topic: The Swiss Army Knife of Java Exploitation☆22Updated 4 months ago
- 7bits安全团队-《Java安全-记一次实战使用memoryshell》代码样例☆19Updated 2 years ago
- ☆9Updated 4 years ago
- jolokia Realm JNDI RCE 漏洞检测,并获取明文密码☆16Updated 2 years ago
- My security presentations☆28Updated last year
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆51Updated last year
- Netty/WebFlux 内存马☆25Updated last year
- Hessian UTF-8 Overlong Encoding☆18Updated last year
- ☆18Updated 2 years ago
- CVE-2024-36401-GeoServer Property 表达式注入 Rce woodpecker-framework 插件☆14Updated 7 months ago
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆36Updated 8 months ago
- JNDI/LDAP注入利用工具,对命令进行两种编码,支持多种绕过高版本JDK的方式(参考大佬代码造的轮子)☆44Updated 3 years ago
- 备份下比赛附件☆22Updated 2 years ago
- Spel-research☆26Updated 3 years ago
- Yet Another Extension for Proxy and Yakit☆24Updated 3 months ago
- 多组件客户端☆73Updated 2 months ago
- Java 代码审计 idea 插件☆23Updated 4 months ago
- JSHunter-一款针对于前端的未授权访问扫描工具☆28Updated 2 months ago
- ☆79Updated 7 months ago
- 《JNDI-深入理解Java万恶之源》☆37Updated last year
- Easy burp sign extension!☆55Updated 5 months ago
- 此文件用于配套“卫界安全-阿呆攻防”中所涉及的代码类文档☆10Updated 2 months ago
- PoC of Apache Dubbo CVE-2023-23638☆33Updated last year