Ch1ngg / WebLogicPasswordDecryptorUi

Related projects: ⓘ

• admintony / shiro_rememberMe_Rce
  利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。
  ☆123Updated 4 years ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆233Updated 3 years ago
• p1g3 / Fastjson-Scanner
  a burp extension to find where use fastjson
  ☆163Updated 4 years ago
• 7hang / POC-EXP
  Web端POC-EXP 整理
  ☆99Updated 3 years ago
• Y4er / fastjson-bypass-autotype-1.2.68
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆223Updated last year
• LS95 / gopher-redis-auth
  This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。
  ☆108Updated 5 years ago
• yhy0 / SScan
  ☆238Updated this week
• yuanhaiGreg / LandrayExploit
  ☆193Updated this week
• tangxiaofeng7 / Weblogic-scan
  ☆106Updated this week
• uknowsec / SharpNetCheck
  ☆289Updated 4 years ago
• bigsizeme / fastjson-check
  fastjson 被动扫描、不出网payload生成
  ☆366Updated 2 years ago
• flowerwind / JspFinder
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆174Updated 2 years ago
• potats0 / javaSerializationTools
  ☆145Updated 3 years ago
• lalajun / RMIDeserialize
  RMI 反序列化环境 一步步
  ☆211Updated 4 years ago
• 5up3rc / weblogic_cmd
  weblogic t3 deserialization rce
  ☆263Updated 7 years ago
• feihong-cs / JspMaster-Deprecated
  一款基于webshell命令执行功能实现的GUI webshell管理工具，支持流量加密
  ☆217Updated 3 years ago
• Veraxy00 / Shiro-EXP
  Apache Shiro 反序列化漏洞检测与利用工具，一键注入内存马
  ☆138Updated 3 years ago
• Ch1ngg / JCE
  JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本
  ☆254Updated 2 years ago
• arno567 / ShiroScanF
  shiro反序列化批量ip快速检测脚本
  ☆79Updated 4 years ago
• timwhitez / Frog-Auth
  🐸Unauthorized Detection Framework未授权访问检测框架
  ☆157Updated 9 months ago
• Litch1-v / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆182Updated 3 years ago
• grayddq / EBurst
  这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。
  ☆322Updated last year
• depycode / fastjson-c3p0
  fastjson不出网利用、c3p0
  ☆245Updated 3 years ago
• XTeam-Wing / Hunting-Active-Directory
  个人整理的一些域渗透Tricks，可能有一些错误。
  ☆243Updated 3 years ago
• GGyao / CVE-2020-14882_ALL
  CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。
  ☆143Updated 2 years ago
• dr0op / shiro-550-with-NoCC
  Shiro-550 不依赖CC链利用工具
  ☆446Updated 3 months ago
• yzddmr6 / JspForAntSword
  中国蚁剑JSP一句话Payload
  ☆117Updated 3 years ago
• PINGXcpost / F-NAScan-PLUS
  F-NAScan-PLUS 安服资产搜集
  ☆140Updated 3 years ago