BMSK1994 / JavaDeserialize-Note
Tomcat内存马、XStream、Fastjson、Weblogic T3安全笔记
☆40Updated 3 years ago
Alternatives and similar repositories for JavaDeserialize-Note:
Users that are interested in JavaDeserialize-Note are comparing it to the libraries listed below
- 安服面经☞渗透测试/代码审计/安全研究☆26Updated 2 years ago
- ☆36Updated 2 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆54Updated 2 years ago
- Spel-research☆26Updated 2 years ago
- 对接JNDIMonitor的Burp Suite被动扫描插件☆23Updated 3 years ago
- Learning JAVA for Security☆31Updated 2 years ago
- ☁️Tencent Cloud AccessKey tools☆16Updated 6 months ago
- 一个简单的批量反编译jar包的小脚本☆33Updated 2 years ago
- 《JNDI-深入理解Java万恶之源》☆38Updated last year
- 一个Spring4Shell 被动式检测的Burp插件☆93Updated 2 years ago
- 内网渗透相关总结☆37Updated 3 years ago
- burpsuite wildcard 插件维护分支☆1Updated 2 years ago
- woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。☆67Updated last year
- burpsuite插件-被动无感识别指纹-主动poc扫描☆24Updated 4 months ago
- 基于ysoserial扩展命令执行结果回显,生成冰蝎内存马☆86Updated last year
- 如何将Java反序列化Payload极致缩小☆48Updated 3 years ago
- 一款探测fastjson漏洞的BurpSuite插件☆60Updated 2 years ago
- Java命令行文件监控小工具(代码审计)☆100Updated 3 years ago
- 一个超级缝合怪的图形化渗透工具☆35Updated 3 years ago
- 代码审计工具,用于监听mysql日志,支持mysql8.0以上和以下的版本。☆25Updated 3 years ago
- Java 内存马生成插件☆50Updated last year
- CNVD-2021-30167 用友NC BeanShell远程代码执行☆30Updated 3 years ago
- nacos api bypass & jwt bypass & get all configs☆38Updated last year
- burp extension for SSRF☆26Updated last year
- 若依后台定时任务一键利用☆17Updated 2 years ago
- 个人翻译/总结渗透测试思维导图☆28Updated 2 years ago