A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆14Jul 28, 2023Updated 2 years ago
Alternatives and similar repositories for ysoserialSecond
Users that are interested in ysoserialSecond are comparing it to the libraries listed below
Sorting:
- 发布一些我发现的漏洞以及利用脚本。☆15Jun 29, 2023Updated 2 years ago
- 一个帮助你PHP反序列化的python工具☆71Feb 20, 2026Updated last week
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆56Sep 6, 2022Updated 3 years ago
- 使用kcp实现的socks5正向代理☆12Dec 9, 2023Updated 2 years ago
- 一个在我的世界中实现的CTF平台☆24Feb 4, 2025Updated last year
- ☆28Aug 12, 2023Updated 2 years ago
- clfs CVE 的一些 POC 收集☆16Oct 27, 2022Updated 3 years ago
- 反取证程序,类似usbkill☆11Apr 22, 2023Updated 2 years ago
- 支持注入内存马和Bypass WAF☆29Dec 12, 2023Updated 2 years ago
- CVE-2022-22947注入哥斯拉内存马☆28Jun 21, 2023Updated 2 years ago
- whatweb plus plugins☆17Sep 5, 2025Updated 6 months ago
- NTLM/Negotiate authentication over HTTP that supports Pass The Hash Mode (PtH)☆17Sep 13, 2024Updated last year
- Burpsuite extension. Supports ASP.NET ViewStateDecoder☆33Updated this week
- shiro rememberMe 在线加解密工具☆54Mar 25, 2024Updated last year
- BCEL编解码工具☆16Aug 3, 2022Updated 3 years ago
- Spring Boot whitelabel error page SpEL rce EXP☆13May 24, 2024Updated last year
- c3p0 new gadget☆28Apr 1, 2025Updated 11 months ago
- 单进程浏览器模拟爆破 通过selenium实现 支持CSS选择☆19May 9, 2025Updated 9 months ago
- 基于原版 frp 二开, 添加了一些小功能☆107Jan 29, 2024Updated 2 years ago
- A nim implementation of sRDI☆20Oct 18, 2023Updated 2 years ago
- 用golang实现的Struts2扫描工具☆67Jan 11, 2024Updated 2 years ago
- Struts2 Scanning and Utilization 漏洞扫描+利用 s2_001 s2_005 s2_007 s2_008 s2_009 s2_013 s2_015 s2_032 s2_045 s2_046 s2_048 s2_052 s2_053 s2_05…☆20Apr 5, 2023Updated 2 years ago
- MemShell List☆90Jul 18, 2023Updated 2 years ago
- 收集云沙箱上线C2的ip,如微X、奇XX、3X0、virustX等☆125Oct 23, 2023Updated 2 years ago
- 🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.☆16Sep 7, 2023Updated 2 years ago
- HyperOS Bypass的Python实现,单文件即可使用☆18Jul 17, 2024Updated last year
- 一款利用某云厂商的物联网平台作为c2的框架☆23Jun 18, 2023Updated 2 years ago
- 轻量级的 Active Directory 枚举工具,用于收集域环境中的信息☆88Mar 22, 2025Updated 11 months ago
- URLFUZZ By T00ls.Net☆24Jul 4, 2023Updated 2 years ago
- python简单webshell,用于蚁剑远程管理☆23Jul 14, 2024Updated last year
- Apache Axis 组件漏洞利用方法☆19Sep 10, 2022Updated 3 years ago
- java-agent内存马一键注入服务器维权工具,支持自定义路径、校验和内存马内容。☆126Nov 4, 2025Updated 4 months ago
- ysoSimple:简易的Java漏洞利用工具,集成Java反序列化,Hessian反序列化,XStream反序列化,SnakeYaml反序列化,Shiro550,JSF反序列化,SSTI模板注入,JdbcAttackPayload,JNDIAttack,字节码生成。☆105Jan 20, 2026Updated last month
- 面向护网,攻防演练等场景下的小型蜜罐☆81Apr 18, 2024Updated last year
- 本项目是基于Neo-reGeorg进行二次开发,对PHP木马添加了AES加密,修改了请求体和响应体特征☆91Mar 8, 2024Updated last year
- burp手工检测fastjson辅助☆88Mar 4, 2024Updated 2 years ago
- Yonyou-UNSERIALIZE,用友NC 反序列化检查工具,批量检测用友NC 反序列化☆50Jul 21, 2023Updated 2 years ago
- 通过jar包快速生成patch模版☆52Jul 29, 2023Updated 2 years ago
- 哥斯拉nacos后渗透插件 maketoken adduser☆150Jul 7, 2023Updated 2 years ago