Jlan45 / ysoserialSecondLinks
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆14Updated last year
Alternatives and similar repositories for ysoserialSecond
Users that are interested in ysoserialSecond are comparing it to the libraries listed below
Sorting:
- 发布一些我发现的漏洞以及利用脚本。☆15Updated last year
- Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小☆65Updated 11 months ago
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆51Updated last year
- Hessian UTF-8 Overlong Encoding☆18Updated last year
- Redis primary/secondary replication RCE☆43Updated 3 years ago
- ☆35Updated last year
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆34Updated 6 months ago
- Netty/WebFlux 内存马☆25Updated last year
- portreuse reuseport 端口复用☆61Updated last year
- Java 内存马生成插件☆52Updated last year
- 内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5......☆28Updated 3 months ago
- ☆24Updated 5 months ago
- 一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。☆13Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE EXP☆65Updated last year
- CVE-2023-46604☆63Updated last year
- 检测域内常见一把梭漏洞,包括:NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare☆51Updated last year
- 添加Connector内存马与ws内存马检测逻辑☆16Updated 2 years ago
- c3p0 new gadget☆21Updated 2 months ago
- 用友 nc 系列密码解密☆62Updated 2 years ago
- zip slip☆37Updated 2 years ago
- windows 添加管理员--Rust版本☆44Updated 2 years ago
- 一个既可主动,又可被动提取链接的burp插件☆43Updated last year
- Java 代码审计 idea 插件☆23Updated 3 months ago
- 分享ABC_123自己改造的ysoserial工具,java反序列化漏洞利用,生成的java反序列化利用链支持jdk1.5版本的老旧系统的利用。☆46Updated 2 months ago
- lineadd 渗透测试字典管理工具, 让字典管理生活轻松一点。Penetration test dictionary management tool, make dictionary management life a little easier.☆27Updated last year
- ☆14Updated 2 years ago
- My security presentations☆28Updated last year
- 就是一个burp插件啦(ÒܫÓױ)☆18Updated 3 years ago
- .NET实现的shellcode加载器大集合,不断更新中☆15Updated 9 months ago
- 虚拟WebShell及内存马系列,来源自.NET安全矩阵星球☆28Updated 9 months ago