Firebasky/ScanShiro external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Firebasky/ScanShiro

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Firebasky/ScanShiro)

Close

Firebasky / ScanShiroView on GitHubMore

• External links
• Readme badge

一个批量扫描shiro漏洞的工具,支持AES/CMG

☆79Jan 18, 2023Updated 3 years ago

Alternatives and similar repositories for ScanShiro

Users that are interested in ScanShiro are comparing it to the libraries listed below

• tpt11fb / SpringVulScan

  View on GitHub
  burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977
  ☆154Jan 23, 2023Updated 3 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆253Jul 12, 2023Updated 2 years ago
• achuna33 / MYJNDIExploit

  View on GitHub
  自己的JNDI 利用工具，添加一些人性化功能
  ☆131Sep 4, 2022Updated 3 years ago
• coffeehb / Spring4Shell

  View on GitHub
  一个Spring4Shell 被动式检测的Burp插件
  ☆93Apr 8, 2022Updated 3 years ago
• altEr1125 / ShiroAttack2

  View on GitHub
  一款针对Shiro550漏洞进行快速漏洞利用工具。 对 @SummerSec 大佬的项目https://github.com/SummerSec/ShiroAttack2 进行了一些改进。
  ☆250May 29, 2023Updated 2 years ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• Enokiy / cve-2022-22947-spring-cloud-gateway

  View on GitHub
  ☆17Apr 7, 2022Updated 3 years ago
• OneSourceCat / XxlJob-Hessian-RCE

  View on GitHub
  XxlJob<=2.1.2配置不当情况下反序列化RCE
  ☆120Nov 2, 2020Updated 5 years ago
• KrystianLi / ExchangeOWA

  View on GitHub
  一款OutLook信息收集工具
  ☆243May 23, 2023Updated 2 years ago
• HackingCost / AD_Pentest

  View on GitHub
  红队|域渗透重要漏洞汇总(持续更新)
  ☆290Dec 23, 2022Updated 3 years ago
• metaStor / SpringScan

  View on GitHub
  SpringScan 漏洞检测 Burp插件
  ☆606Nov 14, 2023Updated 2 years ago
• turn1tup / JspEncounter

  View on GitHub
  ☆122Jun 7, 2023Updated 2 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆772Jan 26, 2022Updated 4 years ago
• YYHYlh / Dubbo-Scan

  View on GitHub
  一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。
  ☆171Aug 9, 2023Updated 2 years ago
• Peony2022 / shiro_killer

  View on GitHub
  批量ShiroKey检测爆破工具
  ☆308Jan 4, 2023Updated 3 years ago
• burpheart / imagepuller

  View on GitHub
  可以从公开仓库直接拖取镜像的一个小工具 方便直接解包审计代码
  ☆13Feb 11, 2023Updated 3 years ago
• Avienma / DumpHash

  View on GitHub
  一款dump hash工具配合后渗透的利用
  ☆275Apr 21, 2023Updated 2 years ago
• Lonely-night / fastjsonVul

  View on GitHub
  fastjson 80 远程代码执行漏洞复现
  ☆199Sep 7, 2022Updated 3 years ago
• YYHYlh / Apache-Dubbo-CVE-2023-23638-exp

  View on GitHub
  Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
  ☆230Aug 8, 2023Updated 2 years ago
• mstxq17 / MoreFind

  View on GitHub
  一款用于快速导出URL、Domain和IP的小工具
  ☆233Sep 2, 2024Updated last year
• whwlsfb / cve-2022-22947-godzilla-memshell

  View on GitHub
  CVE-2022-22947 注入Godzilla内存马
  ☆210Apr 26, 2022Updated 3 years ago
• K-7H7l / Jeecg_Tools

  View on GitHub
  本工具为jeecg框架漏洞利用工具非jeecg-boot！
  ☆183Aug 13, 2024Updated last year
• BeichenDream / Chunk-Proxy

  View on GitHub
  ☆295May 7, 2022Updated 3 years ago
• adeljck / YongYou-Exploit

  View on GitHub
  YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services
  ☆28Sep 28, 2025Updated 5 months ago
• 1derian / go-httpserver

  View on GitHub
  一款在内网中快速开启http服务的工具
  ☆55Jun 2, 2022Updated 3 years ago
• passer-W / shc_bypass

  View on GitHub
  内存加载shellcode绕过waf
  ☆209Jul 25, 2022Updated 3 years ago
• ddwGeGe / NaturalTeeth

  View on GitHub
  ☆125Jul 21, 2024Updated last year
• yanm1e / shiro_key

  View on GitHub
  shiro key 收集
  ☆178Mar 20, 2022Updated 4 years ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆93Jan 17, 2023Updated 3 years ago
• A0WaQ4 / HexDnsEchoT

  View on GitHub
  命令执行不回显但DNS协议出网的命令回显场景解决方案（修改为使用ceye接收请求，添加自定义DNS服务器）
  ☆292Aug 20, 2023Updated 2 years ago
• S9MF / ShiroScan2

  View on GitHub
  基于BurpShiroPassiveScan修改增加了Xray回显链生成
  ☆56Sep 6, 2022Updated 3 years ago
• Tas9er / ByPassBehinder4J

  View on GitHub
  冰蝎Java WebShell自动化免杀生成
  ☆783Mar 15, 2022Updated 4 years ago
• whwlsfb / SpringSpider

  View on GitHub
  Spring Actuator端点的BurpSuite被动扫描插件。
  ☆202Nov 2, 2022Updated 3 years ago
• No-Github / Adinfo

  View on GitHub
  域信息收集工具
  ☆11Jun 5, 2023Updated 2 years ago
• emo-crab / ysoserial-rs

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆69Feb 5, 2023Updated 3 years ago
• lele8 / SharpUserIP

  View on GitHub
  获取服务器或域控登录日志
  ☆276Sep 8, 2023Updated 2 years ago
• hayasec / 360SafeBrowsergetpass

  View on GitHub
  这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
  ☆637Apr 4, 2021Updated 4 years ago
• i11us0ry / winlog

  View on GitHub
  一款基于go的windows信息收集工具，主要收集目标机器rdp端口、mstsc远程连接记录、mstsc密码和安全事件中4624、4625登录事件记录
  ☆290Jul 18, 2022Updated 3 years ago
• novysodope / AMF_JRMP

  View on GitHub
  改造一个基于jrmp的AMF反序列化利用工具
  ☆16Jul 7, 2022Updated 3 years ago