Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小
☆66Jul 4, 2024Updated 2 years ago
Alternatives and similar repositories for yapi-rce-webshell
Users that are interested in yapi-rce-webshell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MySQL_Fake_Server-啄木鸟yso适配版☆45Sep 20, 2024Updated last year
- Mssql利用工具☆278Aug 7, 2023Updated 2 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆55Sep 6, 2022Updated 3 years ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆172Aug 9, 2023Updated 2 years ago
- 用Java agent实现内存马等功能☆201Jul 27, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Linux下用于远程加载可执行文件以达到内存加载的目的☆201Nov 9, 2022Updated 3 years ago
- JavaPassDump☆277Jan 7, 2022Updated 4 years ago
- 魔改shadowsocks，实现socks5内网穿透。☆62Nov 28, 2025Updated 7 months ago
- DBeaver数据库密码解密工具☆207Nov 29, 2023Updated 2 years ago
- Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践☆230Aug 8, 2023Updated 2 years ago
- ☆339Jun 7, 2022Updated 4 years ago
- 大华智慧园区系统sso_initsession文件上传批量脚本☆22Sep 4, 2023Updated 2 years ago
- 一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理☆294Aug 8, 2023Updated 2 years ago
- 自己的JNDI 利用工具，添加一些人性化功能☆130Sep 4, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆120Aug 9, 2024Updated last year
- BurpHttpHelper是一款Burpsuite插件，主要用于简化和解决Burpsuite对Http的一些操作.☆114Jan 22, 2023Updated 3 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆603Jun 16, 2026Updated last month
- 一个高度可定制化的JNDI和Java反序列化利用工具☆475Jan 17, 2023Updated 3 years ago
- 添加计划任务方法集合☆316Aug 6, 2023Updated 2 years ago
- 用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看☆127Apr 17, 2023Updated 3 years ago
- 使用java编写的CRLF-Injection-burp被动扫描插件☆46Dec 20, 2022Updated 3 years ago
- Docker容器逃逸工具（Docker Escape Tools）☆278Dec 15, 2022Updated 3 years ago
- 哥斯拉nacos后渗透插件 maketoken adduser☆149Jul 7, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Shiro文件上传工具☆102Jun 28, 2023Updated 3 years ago
- Exchange 服务器安全性的辅助测试工具☆333Jul 21, 2023Updated 3 years ago
- ☆91Updated this week
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆110Jan 8, 2021Updated 5 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆256Jul 12, 2023Updated 3 years ago
- 用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件☆211Apr 18, 2023Updated 3 years ago
- 一个能够利用MSSQL的xp_cmdshell功能来进行流量代理的脚本，用于在站酷分离且不出网SQL注入进行代理☆107Sep 19, 2022Updated 3 years ago
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆132Oct 12, 2024Updated last year
- ☆297May 7, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆344Mar 6, 2022Updated 4 years ago
- 获取服务器或域控登录日志☆280Sep 8, 2023Updated 2 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆563Feb 1, 2024Updated 2 years ago
- An EternalBlue exploit implementation in pure go☆101Nov 22, 2020Updated 5 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案☆276Jan 10, 2023Updated 3 years ago