Bin4xin / bigger-than-biggerView external linksLinks
Expolit Lists. 相关集合💥💥💥 ;) 用友NC反序列化/ CTF/ Java Deserialization/Shiro Vulns/ CNVD or CVE Vulns/ Log4j2/ Hikvision-decrypter...✨✨✨
☆71Oct 12, 2025Updated 4 months ago
Alternatives and similar repositories for bigger-than-bigger
Users that are interested in bigger-than-bigger are comparing it to the libraries listed below
Sorting:
- Shiro文件上传工具☆100Jun 28, 2023Updated 2 years ago
- zip slip☆38Apr 7, 2023Updated 2 years ago
- weblogic历史漏洞利用工具☆91Jul 25, 2022Updated 3 years ago
- 内存马持久化☆59May 19, 2022Updated 3 years ago
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆120Aug 9, 2024Updated last year
- PoC for the CVE-2022-41080 , CVE-2022-41082 and CVE-2022-41076 Vulnerabilities Affecting Microsoft Exchange Servers☆95Jan 10, 2023Updated 3 years ago
- A memory shell for ruoyi☆266Apr 28, 2023Updated 2 years ago
- 蓝凌OA远程代码执行漏洞批量检查☆128Jul 7, 2022Updated 3 years ago
- enc8 密码碰撞脚本☆33Jan 31, 2023Updated 3 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆770Jan 26, 2022Updated 4 years ago
- ☆117Sep 13, 2023Updated 2 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- CVE-2022-22947 注入Godzilla内存马☆210Apr 26, 2022Updated 3 years ago
- Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践☆231Aug 8, 2023Updated 2 years ago
- 自己的JNDI 利用工具,添加一些人性化功能☆131Sep 4, 2022Updated 3 years ago
- 分享ABC_123自己改造的ysoserial工具,java反序列化漏洞利用,生成的java反序列化利用链支持jdk1.5版本的老旧系统的利用。☆59Mar 16, 2025Updated 11 months ago
- rmi打内存马工具,适用于目标用不了ldap的情况☆254Jul 12, 2023Updated 2 years ago
- EMQX Dashboard Malicious Plugin leading to RCE☆47Jun 16, 2025Updated 8 months ago
- 收集内存马打入方式☆506May 20, 2022Updated 3 years ago
- 拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马,支持注入CMD内存马和冰蝎内存马☆511Aug 31, 2022Updated 3 years ago
- 亿赛通 电子文档安全管理系统-/UploadFileFromClientServiceForClient 任意文件上传漏洞☆13Aug 15, 2023Updated 2 years ago
- ☆342Jun 7, 2022Updated 3 years ago
- Mssql利用工具☆276Aug 7, 2023Updated 2 years ago
- 针对finereportv10反序列化接口/webroot/decision/remote/design/channel进行无回显检测并提供Godzilla memshell注入功能(部分环境缺少依赖无法成功)☆24Oct 17, 2023Updated 2 years ago
- 漏洞poc☆109Jan 4, 2026Updated last month
- Burpsuite插件:被动进行未授权访问或越权操作的扫描☆21Aug 28, 2021Updated 4 years ago
- CVE-2022-22965写入冰蝎webshell脚本☆63May 10, 2022Updated 3 years ago
- burpsuite 的Spring漏洞扫描插件。SpringVulScan:支持检测:路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977☆154Jan 23, 2023Updated 3 years ago
- Thinkphp3,Thinkphp5,Thinkphp6,日志泄漏批量下载。☆86Jun 7, 2022Updated 3 years ago
- VMware vCenter Server任意文件上传漏洞 / Code By:Jun_sheng☆21Jul 8, 2022Updated 3 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- 多线程的web目录扫描工具☆170Oct 31, 2023Updated 2 years ago
- 用友NC-OA漏洞利用☆88Nov 25, 2021Updated 4 years ago
- ☆241Feb 26, 2023Updated 2 years ago
- 组合利用泛微信息泄漏漏洞和任意用户登录漏洞,可获取全部loginId并测试登录☆59Aug 3, 2023Updated 2 years ago
- 用友NC反序列化漏洞payload生成☆73Aug 30, 2022Updated 3 years ago
- 基于go语言的帆软报表漏洞检测工具☆14Sep 4, 2022Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE EXP☆65Jun 13, 2023Updated 2 years ago
- Woodpecker模板项目,方便创建新插件☆14Jul 25, 2024Updated last year