Dliv3 / redis-rogue-server
Redis 4.x/5.x RCE
☆528Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for redis-rogue-server
- redis 4.x/5.x master/slave getshell module☆347Updated 4 years ago
- A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.☆699Updated last year
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆684Updated 3 years ago
- Java RCE 回显测试代码☆995Updated 4 years ago
- 通过 Redis 主从写出无损文件☆700Updated 4 years ago
- fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。☆113Updated 3 years ago
- Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload☆888Updated 3 years ago
- oracle 数据库命令执行☆554Updated 4 years ago
- Shiro-721 RCE Via RememberMe Padding Oracle Attack☆254Updated 4 years ago
- Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测☆509Updated 4 years ago
- ☆319Updated 3 years ago
- fastjson一键命令执行☆485Updated 4 years ago
- JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring☆589Updated 3 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆351Updated 2 years ago
- 一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。☆349Updated 3 years ago
- EHole(棱洞)-红队重点攻击系统指纹探测工具☆469Updated 3 years ago
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell☆531Updated 4 years ago
- Apache Shiro 反序列化漏洞检测与利用工具☆506Updated 4 years ago
- Weblogic环境搭建工具☆770Updated 4 years ago
- Cobalt Strike team server password brute force tool☆387Updated 6 years ago
- 一个简单的Fastjson反序列化检测burp插件☆865Updated 3 years ago
- 给woodpecker框架量身定制的ysoserial☆523Updated 2 years ago
- poc-collection 是对 github 上公开的 PoC 进行收集的一个项目。☆281Updated 3 years ago
- Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】☆236Updated 2 years ago
- 高危漏洞精准检测与深度利用框架☆1,366Updated last year