Alternatives and similar repositories for java-deserialization-of-untrusted-data-poc

Users that are interested in java-deserialization-of-untrusted-data-poc are comparing it to the libraries listed below

• langligelang / maobugs

  View on GitHub
  java 漏洞平台包含各种CVE
  ☆23Jun 17, 2022Updated 3 years ago
• pwntester / XStreamPOC

  View on GitHub
  POC for XStream RCE
  ☆13Dec 23, 2013Updated 12 years ago
• kanav99 / github-java-ctf

  View on GitHub
  Winning submission for the GitHub Security Lab CTF 4: CodeQL and Chill - The Java Edition
  ☆19Jun 25, 2020Updated 5 years ago
• Pure-T / deflat

  View on GitHub
  use angr to deobfuscation
  ☆10Oct 8, 2019Updated 6 years ago
• ETOCheney / phpAudit

  View on GitHub
  一个简单的php危险函数检测工具
  ☆10Dec 19, 2018Updated 7 years ago
• knqyf263 / CVE-2018-1273

  View on GitHub
  Environment for CVE-2018-1273 (Spring Data Commons)
  ☆10Aug 15, 2018Updated 7 years ago
• GrrrDog / Sploits

  View on GitHub
  Place for random PoCs
  ☆18May 21, 2020Updated 5 years ago
• iflody / codeql-workshop

  View on GitHub
  ☆12Aug 5, 2021Updated 4 years ago
• coffeehb / portscan

  View on GitHub
  可能有一些你没见过的端口扫描脚本
  ☆12Nov 28, 2018Updated 7 years ago
• any-how / Getinfo_phpinfo

  View on GitHub
  提取phpinfo()敏感信息
  ☆11Nov 23, 2018Updated 7 years ago
• zhazhami / upload-fuzzer

  View on GitHub
  Upload Fuzzer for Burpsuite
  ☆17Aug 23, 2018Updated 7 years ago
• pysqz / plugo

  View on GitHub
  a simple golang plugin framework
  ☆12Jun 22, 2017Updated 8 years ago
• murataydemir / CVE-2020-14883

  View on GitHub
  [CVE-2020-14882] Oracle WebLogic Server Authenticated Remote Code Execution (RCE)
  ☆13Nov 9, 2020Updated 5 years ago
• retanoj / BurpMultiProxy

  View on GitHub
  ☆13Feb 17, 2016Updated 9 years ago
• tin-z / narly.js

  View on GitHub
  narly.js - print binary protections with Windbg JS (/SafeSEH, /GS, ASLR, etc.)
  ☆15Nov 14, 2022Updated 3 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• lz2y / DubboPOC

  View on GitHub
  Apache Dubbo漏洞测试Demo及其POC
  ☆65Mar 27, 2023Updated 2 years ago
• carstein / vsf

  View on GitHub
  Very Simple Fuzzer
  ☆21Jun 12, 2020Updated 5 years ago
• mjwhitta / win

  View on GitHub
  Windows API/constants, identity, and WinHTTP/WinINet for Go.
  ☆19Jan 13, 2026Updated last month
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 4 years ago
• JoyChou93 / md5-extension-attack

  View on GitHub
  MD5长度扩展攻击
  ☆40Jun 8, 2016Updated 9 years ago
• tin-z / GDBleed

  View on GitHub
  Dynamic-Static binary instrumentation framework on top of GDB
  ☆50Sep 25, 2023Updated 2 years ago
• ozergoker / CVE-2021-40444

  View on GitHub
  Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444
  ☆16Sep 29, 2021Updated 4 years ago
• Dido1960 / Weblogic-CVE-2020-2551-To-Internet

  View on GitHub
  CVE-2020-2551 POC to use in Internet
  ☆22May 26, 2020Updated 5 years ago
• Letitmiss / JMS

  View on GitHub
  Java消息中间件学习笔记
  ☆23Aug 1, 2017Updated 8 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 6 years ago
• zhzhdoai / Weblogic_Vuln

  View on GitHub
  CVE-2015-4852、CVE-2016-0638、CVE-2016-3510、CVE-2019-2890漏洞POC
  ☆17Aug 11, 2020Updated 5 years ago
• m3ssap0 / spring-break_cve-2017-8046

  View on GitHub
  This is a Java program that exploits Spring Break vulnerability (CVE-2017-8046).
  ☆17Jun 4, 2021Updated 4 years ago
• veracode-research / actuator-testbed

  View on GitHub
  A vulnerable application exposing Spring Boot Actuators
  ☆123Feb 25, 2019Updated 6 years ago
• dinhbaouit / CVE-2021-26084

  View on GitHub
  ☆54Sep 1, 2021Updated 4 years ago
• fnmsd / ChunkedHTTPAdapter

  View on GitHub
  参考《利用分块传输吊打所有WAF》修改的requests的Adapter
  ☆98Jan 31, 2019Updated 7 years ago
• tricking-io / contribution

  View on GitHub
  梧桐百科投稿通道
  ☆22May 21, 2018Updated 7 years ago
• imagemlt / LoggedProxy

  View on GitHub
  记录流量的http(s)代理+分布式被动漏洞扫描
  ☆24Jun 30, 2019Updated 6 years ago
• welk1n / FastjsonPocs

  View on GitHub
  一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。
  ☆56Oct 29, 2019Updated 6 years ago
• mishmashclone / GrrrDog-Java-Deserialization-Cheat-Sheet

  View on GitHub
  https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
  ☆54Sep 11, 2021Updated 4 years ago
• crisprss / net_memory_webshell

  View on GitHub
  用来存放平时写的一些net内存马，仅用于练手，需要可以自行修改
  ☆89May 3, 2022Updated 3 years ago
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆386Apr 16, 2022Updated 3 years ago
• samsbp / java-file-ftp

  View on GitHub
  POC for leaking java version through file and ftp protocols
  ☆24Nov 1, 2020Updated 5 years ago
• secoba / HLog

  View on GitHub
  Burpsuite HTTP 插件，主要用于内网测试，可定制Content-Type和Response Content
  ☆24Jul 2, 2018Updated 7 years ago