Claradoll / Security_Learning

Related projects ⓘ

Alternatives and complementary repositories for Security_Learning

• ax1sX / MemShell
  MemShell List
  ☆78Updated last year
• ax1sX / RouteCheck-Alpha
  A Java Route Collection Tool
  ☆86Updated 3 months ago
• FFreestanding / JavaUnserializeChain
  自己积累的一些Java反序列化利用链
  ☆87Updated last year
• lz2y / DubboPOC
  Apache Dubbo漏洞测试Demo及其POC
  ☆61Updated last year
• hanc00l / pocGoby2Xray
  将Goby的json格式Poc转为xray的yaml格式Poc
  ☆130Updated 2 years ago
• su18 / rasp-vuln
  当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。
  ☆78Updated 2 years ago
• KpLi0rn / ysoserial
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Updated 3 years ago
• AfterSnows / ApricusFindEvil
  检测查杀java内存马
  ☆74Updated 11 months ago
• Hackaspx / Hackaspx
  《ASPX安全-只有ASPX安全才能拯救.NET》Only ASPX Security Can Save The NET.
  ☆33Updated 2 years ago
• HackJava / JNDI
  《JNDI-深入理解Java万恶之源》
  ☆39Updated last year
• YYHYlh / Dubbo-Scan
  一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。
  ☆161Updated last year
• Lonely-night / fastjsonVul
  fastjson 80 远程代码执行漏洞复现
  ☆184Updated 2 years ago
• ce-automne / FastjsonPatrol
  一款探测fastjson漏洞的BurpSuite插件
  ☆60Updated 2 years ago
• HackJava / Spring
  《Spring漏洞研究》
  ☆44Updated 2 years ago
• luelueking / kkFileView-v4.3.0-RCE-POC
  ☆80Updated 7 months ago
• passer-W / snakeyaml-memshell
  springboot跨线程注入内存马
  ☆114Updated 2 years ago
• P4r4d1se / heapdump_shiro_vuln
  A heapdump leaks Shiro key causing RCE vulnerability environment.
  ☆52Updated 6 months ago
• webraybtl / ysoserialbtl
  基于ysoserial扩展命令执行结果回显，生成冰蝎内存马
  ☆85Updated last year
• R17a-17 / JavaVulnSummary
  Java漏洞分析汇合
  ☆143Updated 2 years ago
• xsshim / VulnAnalysis
  《漏洞全解》该项目不提供任何的POC与EXP，仅仅分享各种机缘巧合下所产生的漏洞的分析。
  ☆24Updated last year
• TonyD0g / GoPoc
  基于 Json 、自定义Go脚本的多协程验证扫描器，用于快速验证目标是否存在该漏洞或深层次利用。
  ☆39Updated 2 weeks ago
• dushixiang / evil-mysql-server
  evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.
  ☆84Updated 2 years ago
• handbye / SimpleHoneyPot
  面向护网，攻防演练等场景下的小型蜜罐
  ☆76Updated 7 months ago
• wendell1224 / ide-honeypot
  一款针对于IDE的反制蜜罐 IDE-honeypot
  ☆101Updated 2 years ago
• Y4Sec-Team / mysql-jdbc-tricks
  JDBC Attack Tricks
  ☆135Updated last year
• yuyan-sec / druid_sessions
  获取 alibaba druid 一些 sessions , sql , urls
  ☆229Updated last year