HackJava / JNDI
《JNDI-深入理解Java万恶之源》
☆37Updated last year
Alternatives and similar repositories for JNDI:
Users that are interested in JNDI are comparing it to the libraries listed below
- burpsuite插件-被动无感识别指纹-主动poc扫描☆26Updated 6 months ago
- Spel-research☆26Updated 2 years ago
- 安服面经☞渗透测试/代码审计/安全研究☆27Updated 2 years ago
- Java 内存马生成插件☆50Updated last year
- 基于 Json 、自定义Go脚本的多协程验证扫描器,用于快速验证目标是否存在该漏洞或深层次利用。☆39Updated 4 months ago
- ☆35Updated 2 years ago
- ☆68Updated 3 years ago
- Java命令行文件监控小工具(代码审计)☆100Updated 3 years ago
- 自己积累的一些Java反序列化利用链☆87Updated 2 years ago
- 一款探测fastjson漏洞的BurpSuite插件☆61Updated 2 years ago
- MemShell List☆79Updated last year
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆50Updated last year
- Java漏洞调试分析集合☆86Updated last year
- Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit☆79Updated last year
- Java 代码审计-存在风险的函数汇总。方便我们日常代码审计过程中快速定位漏洞点,配合静态代码分析工具做到事半功倍。Java code audit - summary of risky functions. It is convenient for us to quickl…☆29Updated 8 months ago
- 《FanZhi-攻击与反制的艺术》☆63Updated last year
- 如何将Java反序列化Payload极致缩小☆48Updated 3 years ago
- nuclei模版生成插件☆105Updated last year
- pyyso is a Python package that generate java serialized poc. Including CommonsCollections1-7, JDK7u21, JDK8u20, ldap for jndi, shiro-550,…☆53Updated 2 years ago
- SpringBoot获取被星号脱敏的密码的明文☆57Updated 3 years ago
- 基于ysoserial扩展命令执行结果回显,生成冰蝎内存马☆87Updated last year
- The purpose of this script is to bypass disablefund, provide some useful information, and dig the hook function of PHP extension.☆14Updated 3 years ago
- Apache Dubbo漏洞测试Demo及其POC☆61Updated last year
- 经过优化的渗透测试Payload字典、Fuzz Payload字典。Penetration testing Payload dictionary, Fuzzy Payload dictionary☆36Updated 8 months ago
- 一个Spring4Shell 被动式检测的Burp插件☆93Updated 2 years ago
- Java漏洞分析汇合☆142Updated 3 years ago
- 若依后台定时任务一键利用☆51Updated 2 years ago
- <a href="sumsec.me"><img src="https://readme-typing-svg.demolab.com?font=Fira+Code&size=24&pause=1000&color=FDFDFD&background=13797800&ce…☆53Updated this week
- iis高版本短文件名猜解脚本,适用于iis7.5~10.x版本的iis中间件。☆46Updated 6 months ago
- httpgo是一个web指纹识别工具,支持多线程、HTTP代理、批量识别、保存结果、截图展示。可自行添加指纹。☆19Updated 3 weeks ago