Ape1ron / SpringAopInDeserializationDemo1Links
在spring-aop中新发现的反序列化gadget-chain
☆51Updated 8 months ago
Alternatives and similar repositories for SpringAopInDeserializationDemo1
Users that are interested in SpringAopInDeserializationDemo1 are comparing it to the libraries listed below
Sorting:
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆37Updated 10 months ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具,可根据不同的Jdk生成出其所对应的xslt文件☆90Updated 2 years ago
- ☆50Updated 2 years ago
- Java bytecode line number restoration tool☆88Updated 2 weeks ago
- 基于污点分析和模拟栈帧技术的JSP Webshell检测☆47Updated 2 months ago
- My security presentations☆28Updated 2 years ago
- 如何将Java反序列化Payload极致缩小☆65Updated 3 years ago
- Easy burp sign extension!☆55Updated 7 months ago
- Netty/WebFlux 内存马☆25Updated last year
- Apache Dubbo漏洞测试Demo及其POC☆62Updated 2 years ago
- 多组件客户端☆74Updated 4 months ago
- 一个简单的批量反编译jar包的小脚本☆42Updated 3 years ago
- ☆14Updated 2 years ago
- Java Agent memory horse scanner combined with Call Graph modus☆64Updated 2 years ago
- A list for Spring Security☆125Updated last year
- 方便自己搭建codeql环境和数据库的工具。☆38Updated 3 weeks ago
- Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …☆48Updated 3 years ago
- ☆15Updated 2 years ago
- Java漏洞调试分析集合☆91Updated last year
- Hessian UTF-8 Overlong Encoding☆19Updated last year
- JNDI/LDAP注入利用工具,对命令进行两种编码,支持多种绕过高版本JDK的方式(参考大佬代码造的轮子)☆44Updated 3 years ago
- Java 内存马生成插件☆54Updated 2 years ago
- 添加Connector内存马与ws内存马检测逻辑☆16Updated 2 years ago
- JDK CVE-2023-21939☆95Updated 2 years ago
- 之前方便自己研究RASP原理和绕过时顺手写的,用于快速启动和重置RASP环境☆71Updated 11 months ago
- ☆28Updated last year
- 安全升级jar包时,辅助检测Java Archive (JAR) 包之间兼容性,各类符号引用的存在检测,包括方法、方法签名、字段定义和引用、类引用等等☆14Updated last year
- 利用代理驱动绕过JDBC Attack检测☆130Updated 3 months ago
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆91Updated 3 years ago
- ☆79Updated 9 months ago