在spring-aop中新发现的反序列化gadget-chain
☆52Jan 12, 2025Updated last year
Alternatives and similar repositories for SpringAopInDeserializationDemo1
Users that are interested in SpringAopInDeserializationDemo1 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 高版本Fastjson在Java原生反序列化中的利用演示☆26Jan 12, 2025Updated last year
- Java bytecode line number restoration tool☆144Aug 31, 2025Updated last year
- ☆36Mar 19, 2026Updated 7 months ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- ☆79Nov 22, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆287Dec 13, 2024Updated last year
- ☆64Sep 27, 2023Updated 3 years ago
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆52Sep 10, 2023Updated 3 years ago
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated 2 years ago
- MySQL_Fake_Server-啄木鸟yso适配版☆46Sep 20, 2024Updated 2 years ago
- ghost-bits-encoder 是一个面向 Woodpecker 的辅助插件，围绕 Ghost Bits / Unicode 高位包装思路，提供通用编解码、JSON 相关编码、URL 相关编码以及若干专项辅助能力。☆55May 15, 2026Updated 5 months ago
- ☆210Oct 27, 2025Updated last year
- Java表达式语句生成器☆191Oct 9, 2023Updated 3 years ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆171Aug 9, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Use Rust to implement some Red Team techniques :)☆12Nov 11, 2024Updated last year
- ☆23Jan 2, 2023Updated 3 years ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆141Mar 11, 2024Updated 2 years ago
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆233Jun 5, 2026Updated 4 months ago
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆109Nov 7, 2024Updated last year
- ☆31Apr 23, 2023Updated 3 years ago
- fastjson auto type derivation search☆22Aug 19, 2021Updated 5 years ago
- xxl-job内存马☆234Jan 26, 2025Updated last year
- IVAgent (Intelligent Vulnerability Agent) 是一个基于大语言模型(LLM)的智能漏洞挖掘 Agent，支持多种分析引擎和二进制/源码分析场景。☆30Mar 17, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 2023白帽补天大会部分代码☆127Dec 26, 2023Updated 2 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- ☆25Dec 13, 2024Updated last year
- Leveraging LLM to generate Java deserialization chains☆95Mar 12, 2026Updated 7 months ago
- Java web路由内存分析工具☆438May 22, 2025Updated last year
- Finding Java/C# gadget chains with CodeQL☆188Oct 7, 2026Updated 3 weeks ago
- burp插件 ShiroScan 主要用于框架、无dnslog key检测，在大佬的基础上加入shiro>1.2.42(AES GCM)☆17May 6, 2021Updated 5 years ago
- 在xxe中使用smb外带多行内容☆110Nov 9, 2025Updated 11 months ago
- Fastjson + MySQL 条件下不出网利用测试环境☆51Dec 6, 2025Updated 10 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆15Jul 7, 2024Updated 2 years ago
- 给woodpecker框架量身定制的ysoserial☆632Oct 26, 2022Updated 4 years ago
- java内存对象搜索辅助工具☆819Sep 23, 2022Updated 4 years ago
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆227Jun 8, 2024Updated 2 years ago
- 使用 agent 实现反序列化 utf8 overlong☆84Apr 24, 2024Updated 2 years ago
- Extract entire function source code based on giving line number using Javaparser☆22Jul 15, 2025Updated last year
- GodzillaNodeJsPayload☆170Dec 10, 2025Updated 10 months ago