A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆38Feb 9, 2024Updated 2 years ago
Alternatives and similar repositories for ysoserial-bf
Users that are interested in ysoserial-bf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Oct 3, 2023Updated 2 years ago
- Tutorial covering how to discover DLLs for Hijacking and how to create proxy DLLS using Microsoft Teams as an example☆16Apr 7, 2021Updated 5 years ago
- Challenge Python☆19Apr 26, 2023Updated 3 years ago
- Jsp Decoder Source Code☆16Mar 23, 2021Updated 5 years ago
- Utility for creating ZipSlip archives☆92Feb 9, 2023Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 6 months ago
- Poc of CVE-2022-22980☆32Jun 23, 2022Updated 4 years ago
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆22Nov 24, 2024Updated last year
- Ansible role that Installs Mythic☆19Jun 24, 2024Updated 2 years ago
- Archive of pentestmonkey.net cheat sheets in case the site goes away permanently☆13Oct 28, 2019Updated 6 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- A collection of useful aggressor scripts. All credits due to its authors.☆12Jul 5, 2019Updated 7 years ago
- The Template Injection Playground allows to test a large number of the most relevant template engines for template injection possibilitie…☆68Apr 29, 2026Updated 3 months ago
- Webshell for Razor Syntax (C#)☆19May 5, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆24Oct 18, 2022Updated 3 years ago
- Memshell☆300Dec 7, 2021Updated 4 years ago
- ☆10May 25, 2023Updated 3 years ago
- Linux Transparent Proxy (Similar to Proxifiter)☆32Nov 27, 2024Updated last year
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆30Feb 26, 2026Updated 5 months ago
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆14Jan 15, 2025Updated last year
- Flask 内存马☆314Mar 26, 2021Updated 5 years ago
- ☆32Aug 15, 2022Updated 3 years ago
- PoC for ManageEngine ADAudit Plus CVE-2022-28219☆43Jun 26, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 蓝凌OA漏洞利用工具/前台无条件RCE/文件写入☆19Jun 29, 2021Updated 5 years ago
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆40Nov 12, 2024Updated last year
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- Godzilla v1.0 source code☆38Aug 26, 2020Updated 5 years ago
- Template injection allows an attacker to include template code into an existant (or not) template. A template engine makes designing HTML…☆13Jan 30, 2020Updated 6 years ago
- All Shell In One. Generate Reverse Shells and/or generate single code that runs all the payloads.☆11Mar 25, 2021Updated 5 years ago
- My security presentations☆32Aug 21, 2023Updated 2 years ago
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆54Oct 30, 2025Updated 8 months ago
- jre8u20 gadget☆34May 23, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆22Nov 3, 2022Updated 3 years ago
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- Installs ADDS and configures a vulnerable domain via a powershell script☆15Jul 13, 2023Updated 3 years ago
- ☆17Dec 14, 2022Updated 3 years ago
- Proxy function calls through the thread pool with ease☆31Feb 27, 2025Updated last year
- A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …☆102Sep 5, 2024Updated last year
- Copy as XMLHttpRequest BurpSuite extension☆33Mar 29, 2021Updated 5 years ago