Alternatives and similar repositories for ShiroVulnEnv

Users that are interested in ShiroVulnEnv are comparing it to the libraries listed below

• minhangxiaohui / JavaAgentMemshell

  View on GitHub
  JavaAgent内存马实现、检测、修复demo
  ☆11Dec 7, 2022Updated 3 years ago
• ce-automne / TomcatMemShell

  View on GitHub
  拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马
  ☆511Aug 31, 2022Updated 3 years ago
• feihong-cs / memShell

  View on GitHub
  FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
  ☆382Nov 6, 2020Updated 5 years ago
• KpLi0rn / AgentMemShell

  View on GitHub
  JavaAgent内存马
  ☆17Jun 15, 2021Updated 4 years ago
• S9MF / ShiroScan2

  View on GitHub
  基于BurpShiroPassiveScan修改增加了Xray回显链生成
  ☆56Sep 6, 2022Updated 3 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆753Apr 14, 2021Updated 4 years ago
• ffadd / JNDIKit

  View on GitHub
  JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）
  ☆44Dec 22, 2021Updated 4 years ago
• KpLi0rn / ysoserial

  View on GitHub
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Sep 14, 2021Updated 4 years ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• kezibei / Urldns

  View on GitHub
  ☆341Oct 11, 2025Updated 4 months ago
• whami-root / SSLShell

  View on GitHub
  ☆24Jan 7, 2025Updated last year
• crisprss / net_memory_webshell

  View on GitHub
  用来存放平时写的一些net内存马，仅用于练手，需要可以自行修改
  ☆89May 3, 2022Updated 3 years ago
• 0x00007c00 / JundeadShell

  View on GitHub
  Java内存马注入工具
  ☆252Apr 8, 2023Updated 2 years ago
• lz2y / yaml-payload-for-ruoyi

  View on GitHub
  A memory shell for ruoyi
  ☆266Apr 28, 2023Updated 2 years ago
• su18 / MemoryShell

  View on GitHub
  JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring
  ☆651Jun 25, 2021Updated 4 years ago
• bigsizeme / shiro-check

  View on GitHub
  Shiro反序列化回显利用、内存shell、检查 Burp插件
  ☆217Sep 1, 2022Updated 3 years ago
• ax1sX / SpringSecurity

  View on GitHub
  A list for Spring Security
  ☆128Jan 16, 2024Updated 2 years ago
• whwlsfb / cve-2022-22947-godzilla-memshell

  View on GitHub
  CVE-2022-22947 注入Godzilla内存马
  ☆210Apr 26, 2022Updated 3 years ago
• Y4er / ysoserial

  View on GitHub
  ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。
  ☆751Jan 11, 2024Updated 2 years ago
• bitterzzZZ / MemoryShellLearn

  View on GitHub
  分享几个直接可用的内存马，记录一下学习过程中看过的文章
  ☆975Mar 23, 2022Updated 3 years ago
• yzddmr6 / Java-Shellcode-Loader

  View on GitHub
  基于Java实现的Shellcode加载器
  ☆414Sep 4, 2023Updated 2 years ago
• flowerwind / Weblogic404Memshell

  View on GitHub
  当找不到任何weblogic路径时打内存马的代码，原理为拦截404请求最开始的代码，通过java agent修改为webshell的逻辑。
  ☆15Nov 22, 2021Updated 4 years ago
• ax1sX / MemShell

  View on GitHub
  MemShell List
  ☆90Jul 18, 2023Updated 2 years ago
• Xsw6 / JavaSec

  View on GitHub
  ☆29Feb 2, 2024Updated 2 years ago
• whwlsfb / SpringSpider

  View on GitHub
  Spring Actuator端点的BurpSuite被动扫描插件。
  ☆203Nov 2, 2022Updated 3 years ago
• sv3nbeast / DnslogCmdEcho

  View on GitHub
  命令执行不回显但DNS协议出网的命令回显场景解决方案
  ☆277Jan 10, 2023Updated 3 years ago
• minhangxiaohui / JAVA_memshells

  View on GitHub
  java 内存马系列 实现（Servlets 、组件、Agent）
  ☆10Mar 7, 2022Updated 3 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆770Jan 26, 2022Updated 4 years ago
• yuebusao / AJ-REPORT-EXPLOIT

  View on GitHub
  ☆24May 11, 2024Updated last year
• BeichenDream / GodzillaMemoryShellProject

  View on GitHub
  ☆306Feb 27, 2025Updated 11 months ago
• achuna33 / Memoryshell-JavaALL

  View on GitHub
  收集内存马打入方式
  ☆506May 20, 2022Updated 3 years ago
• flowerwind / JspFinder

  View on GitHub
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆176Jan 4, 2022Updated 4 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,015Oct 15, 2020Updated 5 years ago
• Daybr4ak / C2ReverseProxy

  View on GitHub
  一款可以在不出网的环境下进行反向代理及cs上线的工具
  ☆491Apr 26, 2023Updated 2 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆254Jul 12, 2023Updated 2 years ago
• A0WaQ4 / BurpText4ShellScan

  View on GitHub
  Text4Shell的burp被动扫描插件
  ☆36Dec 29, 2022Updated 3 years ago
• potats0 / CasExp

  View on GitHub
  Apereo CAS exploit tool
  ☆58Jun 30, 2022Updated 3 years ago
• OneSourceCat / XxlJob-Hessian-RCE

  View on GitHub
  XxlJob<=2.1.2配置不当情况下反序列化RCE
  ☆119Nov 2, 2020Updated 5 years ago
• jiashaoxiong1998 / fernflower

  View on GitHub
  ☆10May 17, 2023Updated 2 years ago