Ar3h/putter external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Ar3h/putter

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Ar3h/putter)

Close

Ar3h / putterView on GitHubMore

• External links
• Readme badge

命令执行写任意文件，主要用于命令执行但不出网情况

☆31Sep 9, 2023Updated 2 years ago

Alternatives and similar repositories for putter

Users that are interested in putter are comparing it to the libraries listed below

• Inull-Studio / php_jsp_asp_webshell

  View on GitHub
  php webshell bypass D盾、safedog、360、火绒等，仅支持php7
  ☆18Aug 25, 2025Updated 6 months ago
• Schira4396 / HrmsTamper

  View on GitHub
  适用于某EHR&HRM的加解密工具，可直接用于sqlmap
  ☆25Jan 14, 2024Updated 2 years ago
• nex121 / webshellEncode

  View on GitHub
  ☆28Aug 12, 2023Updated 2 years ago
• ssrsec / EBrute

  View on GitHub
  exchange接口爆破|邮箱爆破
  ☆20Sep 19, 2024Updated last year
• yuxianzi / FrchannelPlus

  View on GitHub
  帆软bi反序列化漏洞利用工具
  ☆56Jun 4, 2024Updated last year
• unam4 / c3p0explore

  View on GitHub
  c3p0 new gadget
  ☆28Apr 1, 2025Updated 11 months ago
• unam4 / fineldapc

  View on GitHub
  某软最新公开gadgegt,新加入不出网利用。
  ☆89Sep 6, 2024Updated last year
• Arlenhiack / ActiveMQ-RCE-Exploit

  View on GitHub
  ActiveMQ RCE (CVE-2023-46604) 回显利用工具
  ☆41Sep 13, 2024Updated last year
• woodpecker-appstore / druid-decrypter

  View on GitHub
  druid数据库密码解密
  ☆37Apr 7, 2023Updated 2 years ago
• xzajyjs / SpringBoot-whitelabel-error-rce-EXP

  View on GitHub
  Spring Boot whitelabel error page SpEL rce EXP
  ☆13May 24, 2024Updated last year
• Drun1baby / FineReportExploit

  View on GitHub
  帆软报表漏洞检测工具
  ☆114Jun 10, 2025Updated 9 months ago
• evilashz / PIGADVulnScanner

  View on GitHub
  检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare
  ☆79Oct 23, 2023Updated 2 years ago
• Conan924 / PostHikvision

  View on GitHub
  哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。
  ☆170Oct 8, 2024Updated last year
• l3yx / JNDI-Injection-LDAP-Deserialization

  View on GitHub
  ☆37Jun 9, 2023Updated 2 years ago
• zidanfanshao / vcenter_tools

  View on GitHub
  vcenter图形化漏洞利用工具
  ☆70Nov 17, 2024Updated last year
• W01fh4cker / DceRPC-OS-Info

  View on GitHub
  golang实现通过dcerpc和ntlmssp获取Windows远程主机信息
  ☆28Apr 16, 2024Updated last year
• bkfish / yaml-payload-for-Win

  View on GitHub
  用于windows反弹shell的yaml-payload
  ☆71Jun 26, 2021Updated 4 years ago
• TheBeastofwar / linuxhacker

  View on GitHub
  一款linux 内网渗透辅助工具
  ☆77Jan 31, 2024Updated 2 years ago
• yulate / jdbc-tricks

  View on GitHub
  《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…
  ☆572Feb 7, 2026Updated last month
• qianxiao996 / BurpSuite-FrameScan

  View on GitHub
  ☆40Nov 25, 2024Updated last year
• xiaogang000 / XG_JLGJ

  View on GitHub
  专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选
  ☆59Jun 12, 2025Updated 9 months ago
• 0xf4n9x / CDGXStreamDeserRCE

  View on GitHub
  亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用
  ☆120Aug 9, 2024Updated last year
• zhaoyumi / yoyoExploit

  View on GitHub
  一个用友漏洞检测工具
  ☆29May 15, 2024Updated last year
• ssrsec / Godzilla-v300

  View on GitHub
  三色哥斯拉（Godzilla）
  ☆68Dec 27, 2024Updated last year
• TryA9ain / noPac

  View on GitHub
  CVE-2021-42287/CVE-2021-42278 Exploiter
  ☆13Jan 12, 2023Updated 3 years ago
• raise-isayan / ViewStateDecoder

  View on GitHub
  Burpsuite extension. Supports ASP.NET ViewStateDecoder
  ☆33Mar 1, 2026Updated 3 weeks ago
• je6k / CVE-2021-34473-Exchange-ProxyShell

  View on GitHub
  对Exchange Proxyshell 做了二次修改，精确的拆分、实现辅助性安全测试。
  ☆17Nov 23, 2021Updated 4 years ago
• d3ckx1 / checkurlopen

  View on GitHub
  用于网站（HTTP）自动化判断开放和网页快照拍摄
  ☆12Jan 25, 2021Updated 5 years ago
• Anion3r / MSSQLProxy

  View on GitHub
  一个能够利用MSSQL的xp_cmdshell功能来进行流量代理的脚本，用于在站酷分离且不出网SQL注入进行代理
  ☆107Sep 19, 2022Updated 3 years ago
• RuoJi6 / xxl-job-FLM

  View on GitHub
  xxl-job内存马
  ☆227Jan 26, 2025Updated last year
• youki992 / ShiningZ

  View on GitHub
  "闪紫"（英文名shiningZ）社工字典生成工具，支持ABC自定义排列组合、ABC列字典AI扩展、AI提示词联想字典、自定义AI提示、字典去重、结果导出等
  ☆31Oct 27, 2025Updated 4 months ago
• triplexlove / javasocket

  View on GitHub
  java实现反序列化建立socket连接
  ☆60Dec 27, 2024Updated last year
• bmth666 / Yongyou-Unserialize-plus

  View on GitHub
  用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc
  ☆124Oct 12, 2024Updated last year
• wjlin0 / riverPass

  View on GitHub
  riverPass 是一个用Go编写的瑞数WAF绕过工具。它利用了WebSocket协议，将请求发送的自身浏览器中，从而绕过了瑞数WAF的检测。
  ☆234Oct 18, 2024Updated last year
• hkxueqi / YonyouNc-UNSERIALIZE-scan

  View on GitHub
  Yonyou-UNSERIALIZE,用友NC 反序列化检查工具,批量检测用友NC 反序列化
  ☆50Jul 21, 2023Updated 2 years ago
• Hutt0n0 / ActiveMqRCE

  View on GitHub
  用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入
  ☆288Nov 20, 2023Updated 2 years ago
• Y4Sec-Team / no-templates

  View on GitHub
  如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过
  ☆53Sep 10, 2023Updated 2 years ago
• pap1rman / postnacos

  View on GitHub
  哥斯拉nacos后渗透插件 maketoken adduser
  ☆150Jul 7, 2023Updated 2 years ago
• tarihub / blackjump

  View on GitHub
  JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
  ☆273Jun 6, 2025Updated 9 months ago