BMSK1994 / JavaDeserialize-Note
Tomcat内存马、XStream、Fastjson、Weblogic T3安全笔记
☆40Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for JavaDeserialize-Note
- 安服面经☞渗透测试/代码审计/安全研究☆26Updated 2 years ago
- ☆36Updated 2 years ago
- Java命令行文件监控小工具(代码审计)☆95Updated 2 years ago
- 《JNDI-深入理解Java万恶之源》☆39Updated last year
- 一个Spring4Shell 被动式检测的Burp插件☆93Updated 2 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆53Updated 2 years ago
- burpsuite插件-被动无感识别指纹-主动poc扫描☆24Updated 2 months ago
- 一款探测fastjson漏洞的BurpSuite插件☆60Updated 2 years ago
- ☁️Tencent Cloud AccessKey tools☆16Updated 4 months ago
- 对接JNDIMonitor的Burp Suite被动扫描插件☆23Updated 2 years ago
- 一个简单的批量反编译jar包的小脚本☆30Updated 2 years ago
- Java 内存马生成插件☆50Updated last year
- 基于ysoserial扩展命令执行结果回显，生成冰蝎内存马☆85Updated last year
- Learning JAVA for Security☆31Updated 2 years ago
- Spel-research☆24Updated 2 years ago
- 内网渗透相关总结☆37Updated 3 years ago
- FofaMap云查询版是基于C/S架构打造的Fofa数据采集器，仅需配置好一个服务端，即可实现多个客户端同时在线查询，其客户端支持FofaMap国庆版全部功能。☆39Updated last year
- 《ASPX安全-只有ASPX安全才能拯救.NET》Only ASPX Security Can Save The NET.☆33Updated 2 years ago
- burpsuite wildcard 插件维护分支☆1Updated last year
- woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。☆67Updated last year
- Hadoop Yan ResourceManager unauthorized RCE☆34Updated 2 years ago
- <a href="sumsec.me"><img src="https://readme-typing-svg.demolab.com?font=Fira+Code&size=24&pause=1000&color=FDFDFD&background=13797800&ce…☆53Updated this week
- Linux SUID 提权检测脚本，自动分析具有 s 权限的可执行文件并给出相应的提权利用方法☆48Updated 4 years ago
- Java内存马相关小工具☆19Updated last year
- 代码审计工具，用于监听mysql日志，支持mysql8.0以上和以下的版本。☆24Updated 3 years ago
- ☆24Updated last year