Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may be exploited, and screening results need to be excluded by themselves. Looking forward to Fork and Star.
☆49Mar 8, 2022Updated 4 years ago
Alternatives and similar repositories for Fastjson-Gadgets-Automatic-Scanner
Users that are interested in Fastjson-Gadgets-Automatic-Scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CodeQL 寻找 JNDI利用 Lookup接口☆167Apr 10, 2022Updated 4 years ago
- 记录学习codeql的过程☆10Jan 27, 2022Updated 4 years ago
- 用codeql分析grafana最新任意文件读取☆11Dec 10, 2021Updated 4 years ago
- CVE-2022-30525 Zyxel 防火墙命令注入漏洞 POC&EXPC☆12May 28, 2022Updated 4 years ago
- codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)☆204Mar 19, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 4 years ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆21Sep 28, 2022Updated 3 years ago
- An improvement over the original Mimikatz wrapper.☆19Aug 11, 2021Updated 4 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆344Mar 6, 2022Updated 4 years ago
- ☆145Jan 21, 2021Updated 5 years ago
- 基于dbcp的fastjson rce 回显☆198Jun 28, 2021Updated 5 years ago
- ☆91Updated this week
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 4 years ago
- A neo4j procedure for tabby☆136May 17, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 调用x64dbg中的loadll.exe白加黑示例代码☆65Jun 18, 2024Updated 2 years ago
- Java Js Engine Payloads All in one☆292Aug 21, 2023Updated 2 years ago
- ☆840Jun 7, 2022Updated 4 years ago
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- 记录学习codeql的过程☆397Jun 9, 2023Updated 3 years ago
- Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小☆66Jul 4, 2024Updated 2 years ago
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆272Mar 4, 2022Updated 4 years ago
- CodeQL database manager☆50Apr 16, 2025Updated last year
- CodeQL extractor for java, which don't need to compile java source☆344Nov 25, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Finding Java/C# gadget chains with CodeQL☆189Jun 22, 2026Updated last month
- 命令行版向日葵RCE漏洞利用工具 / cmd version of sunlogin exploit tool☆15Mar 26, 2022Updated 4 years ago
- A Go library for generating Java deserialization payloads.☆153Sep 9, 2024Updated last year
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆22Nov 24, 2024Updated last year
- Oracle Access Manager Unauthenticated Attacker Vulnerability CVE-2021-35587☆42Mar 14, 2022Updated 4 years ago
- JDBC Connection URL Attack☆450Sep 10, 2021Updated 4 years ago
- Attack SQL Server through gopher protocol☆21Nov 22, 2021Updated 4 years ago
- RMI 反序列化环境 一步步☆214Aug 31, 2020Updated 5 years ago
- CSAgent 与 GoogleAuth 的缝合体，cobalt strike的破解+otp动态口令的agent☆132Aug 3, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。☆420Dec 3, 2021Updated 4 years ago
- 基于go语言的致远OA漏洞检测工具☆38Oct 28, 2022Updated 3 years ago
- 用Java agent实现内存马等功能☆201Jul 27, 2023Updated 2 years ago
- Magisk burpsuite 证书模块，在安卓10以上通过magisk模块快速安装burpsuite证书☆41Feb 2, 2023Updated 3 years ago
- springboot跨线程注入内存马☆123Apr 10, 2022Updated 4 years ago
- Redis-Attack By Replication (通过主从复制攻击Redis)☆359Nov 25, 2022Updated 3 years ago
- java内存对象搜索辅助工具☆821Sep 23, 2022Updated 3 years ago