Fastjson 1.2.68 ~ 1.2.83 RCE，jdk8、17、21和25全版本，支持批量urls进行poc验证。
☆37Jul 21, 2026Updated 3 months ago
Alternatives and similar repositories for fastjson-1.2.83-gadget-rce
Users that are interested in fastjson-1.2.83-gadget-rce are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 【已复现】Fastjson 1.2.66–1.2.83 JsonType 纯库一键 RCE（AutoType 关闭仍可利用；完整 RCE 需 JDK8 + Spring Boot LaunchedURLClassLoader）。仅限授权安全研究与本地防御验证。☆90Jul 21, 2026Updated 3 months ago
- KubeTrail（云迹） 是一个面向 Kubernetes 授权红队评估与防御验证的容器内态势感知、攻击面发现和 AI 辅助攻防编排工具☆70Sep 17, 2026Updated last month
- AI一键免杀WebShell，包含金刚狼、哥斯拉、冰蝎、菜刀等☆28Jun 7, 2026Updated 4 months ago
- A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory via Cobalt Strike☆19Jul 14, 2025Updated last year
- MemShellParty 命令行客户端 + MCP 服务器：生成 Java 内存马、盲探测、连马验证、执行命令、传输文件，专给 AI Agent和安全测试人员使用。☆38Aug 7, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Snaky C2 — Windows EDR evasion & Red Team C2 framework based on Rust & Nim (Indirect Syscalls, KCT injection, LSB Steganography)☆27Jul 27, 2026Updated 2 months ago
- ReflectiveDLL学习代码☆36Jul 12, 2020Updated 6 years ago
- 记录自己学习Java安全的过程,无技术含量 。☆33Aug 15, 2023Updated 3 years ago
- 蜜罐检测工具，支持自动化URL去重、多线程控制及智能速率限制。可识别伪装服务。☆15Jun 5, 2025Updated last year
- ☆16Dec 26, 2021Updated 4 years ago
- 关于GadgetInspector的二开的一些思考和改进。☆17Sep 4, 2023Updated 3 years ago
- Advanced AI-Powered Exploitation Framework | CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397 |☆17Jan 18, 2026Updated 9 months ago
- Playwright 自动点击 Web 控制台爬虫 + Android App 逆向与黑盒测试套件（frida + adb），用于界面遍历、页面跳转、动态 JS/接口捕获。 an auto-clicking Web console crawler (Playwright) …☆27Updated this week
- POC Utilizing the new SleepMask-VS kit to utilize RC4 encryption.☆12Mar 4, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A blog about learning how to use the Frida dynamic instrumentation toolkit with Android☆37Aug 23, 2026Updated last month
- 只需运行一个简单的命令，即可选择安装或卸载所需的VPN协议,生成clash配置和小火箭配置☆13Jun 2, 2025Updated last year
- 复现Django 漏洞时的部分环境,推荐使用virtualenv还原部分漏洞☆11May 18, 2017Updated 9 years ago
- WeCTF 2022 Source Code & Organizer's Writeup☆33Jun 12, 2022Updated 4 years ago
- RPC计划任务维权-过核晶☆14May 19, 2026Updated 5 months ago
- FOFA 驱动的自动化网络安全侦察与自动化扫描漏洞权重☆13Aug 6, 2025Updated last year
- TongWebEJB漏洞利用工具☆36Apr 24, 2026Updated 5 months ago
- 基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell☆22Dec 6, 2021Updated 4 years ago
- C# .Net 5.0 project to build BOF (Beacon Object Files) in mass☆24Oct 2, 2026Updated 3 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC☆18Sep 2, 2026Updated last month
- CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE☆39Jan 24, 2022Updated 4 years ago
- 哥斯拉Godzilla定制化插件，接收恶意类Base64编码与恶意类类名进行实例化，达到注入任意类型内存马的目的。☆52Dec 30, 2025Updated 9 months ago
- 哥斯拉webshell管理工具二开☆402Sep 16, 2026Updated last month
- ☆14Jul 1, 2023Updated 3 years ago
- Public release for b01lers CTF 2021. Thanks for playing!☆10Apr 10, 2021Updated 5 years ago
- 通过C/C++实现的 Windows RID Hijacking persistence technique (RID劫持 影子账户 账户克隆).☆86Dec 22, 2021Updated 4 years ago
- ☆16Apr 3, 2026Updated 6 months ago
- 一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。☆56Oct 29, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Piclang is statically typed programming language that compiles to raw position-independent x86-64 shellcode, purpose-built for developmen…☆28Jul 23, 2026Updated 2 months ago
- 批量获取域内机器桌面文件☆78Sep 6, 2022Updated 4 years ago
- SpringBoot3-LearningLabs 是一个开源项目，旨在为新手程序员提供一个全面的 Spring Boot 3.x 学习平台。该项目通过一系列精心设计的演示（demo）来展示 Spring Boot 3 的核心功能和最佳实践。无论是微服务架构、数据访问、安全性…☆16Jul 22, 2025Updated last year
- ☆12Apr 7, 2026Updated 6 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- java实现反序列化建立socket连接☆61Dec 27, 2024Updated last year
- 二开artex的代码审计平台 | 新增本地反编译java依赖库 | 多账号管理☆166Updated this week