Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小
☆65Jul 4, 2024Updated 2 years ago
Alternatives and similar repositories for yapi-rce-webshell
Users that are interested in yapi-rce-webshell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MySQL_Fake_Server-啄木鸟yso适配版☆45Sep 20, 2024Updated 2 years ago
- Mssql利用工具☆278Aug 7, 2023Updated 3 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆55Sep 6, 2022Updated 4 years ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆171Aug 9, 2023Updated 3 years ago
- 用Java agent实现内存马等功能☆198Jul 27, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Linux下用于远程加载可执行文件以达到内存加载的目的☆200Nov 9, 2022Updated 3 years ago
- JavaPassDump☆275Jan 7, 2022Updated 4 years ago
- 通过用户名区分socks5 client，不用上线一个代理就得多开一个端口。☆60Aug 14, 2026Updated last month
- DBeaver数据库密码解密工具☆204Nov 29, 2023Updated 2 years ago
- Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践☆229Aug 8, 2023Updated 3 years ago
- ☆338Jun 7, 2022Updated 4 years ago
- 大华智慧园区系统sso_initsession文件上传批量脚本☆22Sep 4, 2023Updated 3 years ago
- 一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理☆296Aug 8, 2023Updated 3 years ago
- 自己的JNDI 利用工具，添加一些人性化功能☆130Sep 4, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆122Aug 9, 2024Updated 2 years ago
- BurpHttpHelper是一款Burpsuite插件，主要用于简化和解决Burpsuite对Http的一些操作.☆115Jan 22, 2023Updated 3 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆606Aug 5, 2026Updated last month
- 一个高度可定制化的JNDI和Java反序列化利用工具☆473Jan 17, 2023Updated 3 years ago
- 添加计划任务方法集合☆312Aug 6, 2023Updated 3 years ago
- 用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看☆125Apr 17, 2023Updated 3 years ago
- 使用java编写的CRLF-Injection-burp被动扫描插件☆44Dec 20, 2022Updated 3 years ago
- Docker容器逃逸工具（Docker Escape Tools）☆276Dec 15, 2022Updated 3 years ago
- 哥斯拉nacos后渗透插件 maketoken adduser☆147Jul 7, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Shiro文件上传工具☆99Jun 28, 2023Updated 3 years ago
- Exchange 服务器安全性的辅助测试工具☆332Jul 21, 2023Updated 3 years ago
- ☆92Jul 22, 2026Updated 2 months ago
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆109Jan 8, 2021Updated 5 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 3 years ago
- 用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件☆208Apr 18, 2023Updated 3 years ago
- 一个能够利用MSSQL的xp_cmdshell功能来进行流量代理的脚本，用于在站酷分离且不出网SQL注入进行代理☆105Sep 19, 2022Updated 4 years ago
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆132Oct 12, 2024Updated last year
- ☆293May 7, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆287Nov 20, 2023Updated 2 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆341Mar 6, 2022Updated 4 years ago
- 获取服务器或域控登录日志☆278Sep 8, 2023Updated 3 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆565Feb 1, 2024Updated 2 years ago
- An EternalBlue exploit implementation in pure go☆102Nov 22, 2020Updated 5 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案☆274Jan 10, 2023Updated 3 years ago