Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information available at https://www.checkmarx.com/blog/apache-dubbo-unauthenticated-remote-code-execution-vulnerability
☆16Dec 10, 2022Updated 3 years ago
Alternatives and similar repositories for CVE-2019-17564-FastJson-Gadget
Users that are interested in CVE-2019-17564-FastJson-Gadget are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆10Sep 2, 2020Updated 6 years ago
- 代码审计关键词扫描工具☆11Apr 29, 2024Updated 2 years ago
- Joern通用漏洞扫描脚本及CheckMark☆11May 24, 2025Updated last year
- This repo contains Axis web shells☆18Jun 15, 2019Updated 7 years ago
- Golang AMSI Bypass☆23Oct 17, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ThinkPHP各版本反序列化利用代码☆32Aug 13, 2020Updated 6 years ago
- scrapy website Article and link ...☆15Dec 13, 2020Updated 5 years ago
- 清除基于java agent木马☆79Apr 12, 2021Updated 5 years ago
- 修改自geacon的多功能linux运维管理工具☆61Apr 2, 2021Updated 5 years ago
- Several XStream gadgets ported from ysoserial☆33Sep 26, 2021Updated 5 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- ☆22Jan 7, 2021Updated 5 years ago
- fastjson 1.2.68 版本 autotype bypass☆139Aug 9, 2026Updated 2 months ago
- Jsp Decoder Source Code☆16Mar 23, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Stop Windows Defender programmatically☆15Jan 17, 2022Updated 4 years ago
- Gopher Tomcat Deployer☆48Nov 12, 2018Updated 7 years ago
- ☆96Nov 26, 2022Updated 3 years ago
- Just some bash scripting to help your recon.☆16Feb 4, 2026Updated 9 months ago
- CommonsBeanutils1,CommonsCollectionsK1☆58Nov 16, 2020Updated 5 years ago
- Flask 内存马☆314Mar 26, 2021Updated 5 years ago
- Java 反序列化学习的实验代码 Java_deserialize_vuln_lab☆86Nov 26, 2018Updated 7 years ago
- ☆50Mar 30, 2021Updated 5 years ago
- repo for ACTF 2020. Challenges, WPs, sources, etc.☆14Dec 9, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An AntSword's plugin to scan webshell☆17Sep 2, 2019Updated 7 years ago
- 读取微信联系人列表，版本（3.9.12.51）☆13Mar 22, 2025Updated last year
- Java After-Deserialization Attack☆79Apr 26, 2021Updated 5 years ago
- fastjson auto type derivation search☆22Aug 19, 2021Updated 5 years ago
- record some AD security and Red Team contents☆14Dec 10, 2019Updated 6 years ago
- XXST-白加黑辅助挖掘工具，全程静默运行不影响正常使用☆17Apr 12, 2024Updated 2 years ago
- 有关 dll 转发的 golang windows 恶意代码示例☆81Aug 20, 2021Updated 5 years ago
- Ligolo : 用于内网渗透的反向隧道☆223Mar 10, 2022Updated 4 years ago
- CVE-2020-4464 / CVE-2020-4450☆36Aug 24, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆11Oct 23, 2019Updated 7 years ago
- LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。☆14Jul 7, 2019Updated 7 years ago
- 禅道8.2 - 9.2.1前台Getshell☆78Sep 19, 2019Updated 7 years ago
- ☆85Dec 6, 2019Updated 6 years ago
- Webshell plugin that works on any Atlassian product employing their plugin framework☆26Nov 20, 2017Updated 8 years ago
- Woodpecker framework Tomcat vulnerability library☆15May 23, 2021Updated 5 years ago
- CVE-2021-26855 & CVE-2021-27065☆28Mar 15, 2021Updated 5 years ago