自己积累的一些Java反序列化利用链
☆93Feb 27, 2023Updated 3 years ago
Alternatives and similar repositories for JavaUnserializeChain
Users that are interested in JavaUnserializeChain are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 个人渗透测试常用加解密算法实现。☆12May 18, 2023Updated 3 years ago
- 应急响应☆14Feb 16, 2023Updated 3 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 3 years ago
- 语雀敏感信息泄露搜索工具☆13Jan 20, 2023Updated 3 years ago
- A Go library for generating Java deserialization payloads.☆151Sep 9, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- 一款利用某云厂商的物联网平台作为c2的框架☆23Jun 18, 2023Updated 3 years ago
- Cobalt Strike 二开项目☆185Feb 11, 2023Updated 3 years ago
- 哥斯拉jsp/jspx免杀webshell生成器☆208Apr 28, 2023Updated 3 years ago
- 通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化☆338Apr 10, 2022Updated 4 years ago
- 导出coremail联系人☆18Apr 19, 2023Updated 3 years ago
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆109Jan 8, 2021Updated 5 years ago
- 一键出网探测工具☆70Feb 25, 2023Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用☆855Jul 7, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- EDR绕过demo☆289Jan 14, 2024Updated 2 years ago
- 红队|域渗透重要漏洞汇总(持续更新)☆291Dec 23, 2022Updated 3 years ago
- ☆521Sep 16, 2022Updated 4 years ago
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- 拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马☆515Aug 31, 2022Updated 4 years ago
- Mssql利用工具☆278Aug 7, 2023Updated 3 years ago
- JavaPassDump☆276Jan 7, 2022Updated 4 years ago
- 魔改版，实现冰蝎直连内存马，无需修改冰蝎客户端☆75Jan 3, 2024Updated 2 years ago
- geacon:简单适配了一个profile配置文件,可直接拿来修改使用,用于cs上线linux.☆157Aug 3, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆267Feb 15, 2026Updated 8 months ago
- 给woodpecker框架量身定制的ysoserial☆632Oct 26, 2022Updated 4 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- 添加计划任务方法集合☆313Aug 6, 2023Updated 3 years ago
- Penetration Testing☆268Feb 27, 2026Updated 8 months ago
- 懒鬼插件/审计过的后的渗透插件/我凭本事打的SESSION凭什么还要我自己动手后渗透？☆251Feb 28, 2026Updated 8 months ago
- 一款OutLook信息收集工具☆246May 23, 2023Updated 3 years ago
- burp手工检测fastjson辅助☆87Mar 4, 2024Updated 2 years ago
- 收集内存马打入方式☆507May 20, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。☆552Jan 18, 2022Updated 4 years ago
- 域控 学习+攻击大纲☆65Dec 18, 2019Updated 6 years ago
- 一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆864Aug 30, 2023Updated 3 years ago
- 自己的JNDI 利用工具，添加一些人性化功能☆130Sep 4, 2022Updated 4 years ago
- 哥斯拉nacos后渗透插件 maketoken adduser☆148Jul 7, 2023Updated 3 years ago
- frp0.38.1 支持域前置、远程加载配置文件、配置文件自删除、流量特征修改☆134Apr 26, 2022Updated 4 years ago
- Java web路由内存分析工具☆438May 22, 2025Updated last year