Esonhugh/yapi-rce-webshell external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Esonhugh/yapi-rce-webshell

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Esonhugh/yapi-rce-webshell)

Close

Esonhugh / yapi-rce-webshellView on GitHubMore

• External links
• Readme badge

Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小

☆66Jul 4, 2024Updated last year

Alternatives and similar repositories for yapi-rce-webshell

Users that are interested in yapi-rce-webshell are comparing it to the libraries listed below

• Ridter / PySQLTools

  View on GitHub
  Mssql利用工具
  ☆276Aug 7, 2023Updated 2 years ago
• 1ucky7 / MySQL_Fake_Server_for_woodpecker_yso

  View on GitHub
  MySQL_Fake_Server-啄木鸟yso适配版
  ☆45Sep 20, 2024Updated last year
• YYHYlh / Dubbo-Scan

  View on GitHub
  一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。
  ☆172Aug 9, 2023Updated 2 years ago
• ethushiroha / JavaAgentTools

  View on GitHub
  用Java agent实现内存马等功能
  ☆198Jul 27, 2023Updated 2 years ago
• S9MF / ShiroScan2

  View on GitHub
  基于BurpShiroPassiveScan修改增加了Xray回显链生成
  ☆56Sep 6, 2022Updated 3 years ago
• YYHYlh / Apache-Dubbo-CVE-2023-23638-exp

  View on GitHub
  Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
  ☆231Aug 8, 2023Updated 2 years ago
• seventeenman / noELF

  View on GitHub
  Linux下用于远程加载可执行文件以达到内存加载的目的
  ☆202Nov 9, 2022Updated 3 years ago
• corener / JavaPassDump

  View on GitHub
  JavaPassDump
  ☆272Jan 7, 2022Updated 4 years ago
• Bl0omZ / JNDIEXP

  View on GitHub
  JNDI在java高版本的利用工具,FUZZ利用链
  ☆597Oct 8, 2022Updated 3 years ago
• 0xf4n9x / CDGXStreamDeserRCE

  View on GitHub
  亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用
  ☆120Aug 9, 2024Updated last year
• evilashz / PigScheduleTask

  View on GitHub
  添加计划任务方法集合
  ☆309Aug 6, 2023Updated 2 years ago
• rebeyond / JNDInjector

  View on GitHub
  一个高度可定制化的JNDI和Java反序列化利用工具
  ☆471Jan 17, 2023Updated 3 years ago
• BeichenDream / CVE-2022-26134-Godzilla-MEMSHELL

  View on GitHub
  ☆342Jun 7, 2022Updated 3 years ago
• TonyNPham / GodzillaPlugin-Suo5-MemProxy

  View on GitHub
  一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理
  ☆288Aug 8, 2023Updated 2 years ago
• djhons / ssSocks5

  View on GitHub
  魔改shadowsocks，实现socks5内网穿透。
  ☆63Nov 28, 2025Updated 3 months ago
• lele8 / SharpDBeaver

  View on GitHub
  DBeaver数据库密码解密工具
  ☆200Nov 29, 2023Updated 2 years ago
• achuna33 / MYJNDIExploit

  View on GitHub
  自己的JNDI 利用工具，添加一些人性化功能
  ☆131Sep 4, 2022Updated 3 years ago
• pap1rman / postnacos

  View on GitHub
  哥斯拉nacos后渗透插件 maketoken adduser
  ☆150Jul 7, 2023Updated 2 years ago
• SPuerBRead / shovel

  View on GitHub
  Docker容器逃逸工具（Docker Escape Tools）
  ☆279Dec 15, 2022Updated 3 years ago
• LTianHang / ShiroUploadTools

  View on GitHub
  Shiro文件上传工具
  ☆101Jun 28, 2023Updated 2 years ago
• pmiaowu / log4j2Scan

  View on GitHub
  用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件
  ☆213Apr 18, 2023Updated 2 years ago
• f0ng / selistener

  View on GitHub
  用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看
  ☆127Apr 17, 2023Updated 2 years ago
• RowTeam / SharpExchangeKing

  View on GitHub
  Exchange 服务器安全性的辅助测试工具
  ☆332Jul 21, 2023Updated 2 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆254Jul 12, 2023Updated 2 years ago
• lele8 / SharpUserIP

  View on GitHub
  获取服务器或域控登录日志
  ☆276Sep 8, 2023Updated 2 years ago
• idiotc4t / sharpwmi

  View on GitHub
  (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆108Jan 8, 2021Updated 5 years ago
• Lotus6 / ConfluenceMemshell

  View on GitHub
  Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入
  ☆554Feb 1, 2024Updated 2 years ago
• BeichenDream / InjectJDBC

  View on GitHub
  注入JVM进程 动态获取目标进程连接的数据库
  ☆342Mar 6, 2022Updated 3 years ago
• Anion3r / MSSQLProxy

  View on GitHub
  一个能够利用MSSQL的xp_cmdshell功能来进行流量代理的脚本，用于在站酷分离且不出网SQL注入进行代理
  ☆107Sep 19, 2022Updated 3 years ago
• hosch3n / FastjsonVulns

  View on GitHub
  [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
  ☆91Sep 2, 2022Updated 3 years ago
• Hutt0n0 / ActiveMqRCE

  View on GitHub
  用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入
  ☆288Nov 20, 2023Updated 2 years ago
• BeichenDream / Chunk-Proxy

  View on GitHub
  ☆295May 7, 2022Updated 3 years ago
• pen4uin / java-echo-generator

  View on GitHub
  一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.
  ☆461Jan 12, 2025Updated last year
• rabbitmask / DruidCrack

  View on GitHub
  Druid 密文解密工具
  ☆137Dec 9, 2020Updated 5 years ago
• Anthem-whisper / YApi-Exploit

  View on GitHub
  YApi boolean-based injection exploit.
  ☆58Feb 8, 2023Updated 3 years ago
• bmth666 / Yongyou-Unserialize-plus

  View on GitHub
  用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc
  ☆123Oct 12, 2024Updated last year
• Lotus6 / JavaGadgetGenerator

  View on GitHub
  JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...
  ☆549Dec 7, 2025Updated 2 months ago
• f0ng / JavaFileDict

  View on GitHub
  Java应用的一些配置文件字典，来源于公开的字典与平时收集
  ☆321Feb 1, 2024Updated 2 years ago
• sv3nbeast / DnslogCmdEcho

  View on GitHub
  命令执行不回显但DNS协议出网的命令回显场景解决方案
  ☆277Jan 10, 2023Updated 3 years ago