Jlan45 / ysoserialSecond
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆13Updated last year
Alternatives and similar repositories for ysoserialSecond:
Users that are interested in ysoserialSecond are comparing it to the libraries listed below
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆32Updated 3 months ago
- 内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5......☆22Updated this week
- Netty/WebFlux 内存马☆24Updated last year
- 在spring-aop中新发现的反序列化gadget-chain☆43Updated last month
- ☆37Updated 2 months ago
- lineadd 渗透测试字典管理工具, 让字典管理生活轻松一点。Penetration test dictionary management tool, make dictionary management life a little easier.☆26Updated last year
- Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小☆65Updated 7 months ago
- ExpFuzz字典☆21Updated 8 months ago
- ☆24Updated last month
- 发布一些我发现的漏洞以及利用脚本。☆15Updated last year
- sliver-webhook 实现上线通知☆23Updated last year
- 某免杀webshell☆18Updated last year
- Redis primary/secondary replication RCE☆43Updated 2 years ago
- 子域名接管的几种变体靶场☆22Updated 7 months ago
- 添加Connector内存马与ws内存马检测逻辑☆16Updated 2 years ago
- .NET实现的shellcode加载器大集合,不断更新中☆14Updated 5 months ago
- Hessian UTF-8 Overlong Encoding☆16Updated 11 months ago
- URLFUZZ By T00ls.Net☆24Updated last year
- portreuse reuseport 端口复用☆61Updated last year
- 检测域内常见一把梭漏洞,包括:NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare☆44Updated last year
- My security presentations☆28Updated last year
- 用友 nc 系列密码解密☆59Updated last year
- 解析netsh抓取的etl文件来定位windows主机上存在ICMP通信的进程与文件的小工具☆31Updated 2 years ago
- zip slip☆36Updated last year
- 一个既可主动,又可被动提取链接的burp插件☆43Updated 10 months ago
- 之前方便自己研究RASP原理和绕过时顺手写的,用于快速启动和重置RASP环境☆55Updated 4 months ago
- Memory Webshell for Spring Web - 适用于 Spring Web 的内存马☆24Updated last year
- CVE-2023-46604☆63Updated last year
- Tomcat的SPI后门☆8Updated last year
- ☆22Updated 2 months ago