Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may be exploited, and screening results need to be excluded by themselves. Looking forward to Fork and Star.
☆49Mar 8, 2022Updated 4 years ago
Alternatives and similar repositories for Fastjson-Gadgets-Automatic-Scanner
Users that are interested in Fastjson-Gadgets-Automatic-Scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CodeQL 寻找 JNDI利用 Lookup接口☆166Apr 10, 2022Updated 4 years ago
- 记录学习codeql的过程☆10Jan 27, 2022Updated 4 years ago
- 用codeql分析grafana最新任意文件读取☆11Dec 10, 2021Updated 4 years ago
- CVE-2022-30525 Zyxel 防火墙命令注入漏洞 POC&EXPC☆12May 28, 2022Updated 3 years ago
- codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)☆206Mar 19, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 4 years ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆22Sep 28, 2022Updated 3 years ago
- An improvement over the original Mimikatz wrapper.☆19Aug 11, 2021Updated 4 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆343Mar 6, 2022Updated 4 years ago
- 在原版nps的基础上，增加了nps探测，以及对应的利用方式（如获取cookie，页面等），进行一些简单的二开。未经过大量测试，可能存在bug。☆21Aug 5, 2025Updated 9 months ago
- ☆145Jan 21, 2021Updated 5 years ago
- 基于dbcp的fastjson rce 回显☆197Jun 28, 2021Updated 4 years ago
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆91Sep 2, 2022Updated 3 years ago
- A neo4j procedure for tabby☆137May 17, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 4 years ago
- 调用x64dbg中的loadll.exe白加黑示例代码☆65Jun 18, 2024Updated last year
- Java Js Engine Payloads All in one☆291Aug 21, 2023Updated 2 years ago
- ☆835Jun 7, 2022Updated 3 years ago
- Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小☆66Jul 4, 2024Updated last year
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆321Feb 1, 2024Updated 2 years ago
- 记录学习codeql的过程☆396Jun 9, 2023Updated 2 years ago
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆271Mar 4, 2022Updated 4 years ago
- CodeQL database manager☆49Apr 16, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 命令行版向日葵RCE漏洞利用工具 / cmd version of sunlogin exploit tool☆15Mar 26, 2022Updated 4 years ago
- CodeQL extractor for java, which don't need to compile java source☆347Nov 25, 2022Updated 3 years ago
- Finding Java gadget chains with CodeQL☆188Apr 18, 2026Updated 2 weeks ago
- A Go library for generating Java deserialization payloads.☆155Sep 9, 2024Updated last year
- generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)☆23Nov 24, 2024Updated last year
- Oracle Access Manager Unauthenticated Attacker Vulnerability CVE-2021-35587☆42Mar 14, 2022Updated 4 years ago
- JDBC Connection URL Attack☆448Sep 10, 2021Updated 4 years ago
- Attack SQL Server through gopher protocol☆21Nov 22, 2021Updated 4 years ago
- Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。☆420Dec 3, 2021Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- RMI 反序列化环境 一步步☆213Aug 31, 2020Updated 5 years ago
- CSAgent 与 GoogleAuth 的缝合体，cobalt strike的破解+otp动态口令的agent☆133Aug 3, 2022Updated 3 years ago
- 用Java agent实现内存马等功能☆201Jul 27, 2023Updated 2 years ago
- Magisk burpsuite 证书模块，在安卓10以上通过magisk模块快速安装burpsuite证书☆41Feb 2, 2023Updated 3 years ago
- springboot跨线程注入内存马☆123Apr 10, 2022Updated 4 years ago
- Redis-Attack By Replication (通过主从复制攻击Redis)☆360Nov 25, 2022Updated 3 years ago
- 域控安全one for all☆739Sep 9, 2024Updated last year