Alternatives and similar repositories for Tomcat-AJP-EXP

Users that are interested in Tomcat-AJP-EXP are comparing it to the libraries listed below

• LFYSec / ToyCompiler

  View on GitHub
  A c0 -> LLVM IR compiler, with some optimization.
  ☆13Jul 13, 2020Updated 5 years ago
• imagemlt / iCloudMusic

  View on GitHub
  SUCTF iCloudMusic 源码及writeup
  ☆10Oct 12, 2022Updated 3 years ago
• Smi1eSEC / My-CTF-Challenge

  View on GitHub
  My-CTF-Challenge
  ☆11Oct 23, 2020Updated 5 years ago
• YDHCUI / CNVD-2020-10487-Tomcat-Ajp-lfi

  View on GitHub
  Tomcat-Ajp协议文件读取漏洞
  ☆795Mar 3, 2020Updated 5 years ago
• imagemlt / tinyAWDplatform

  View on GitHub
  基于docker运行在单机上的awd平台，仅适用于小规模的队内练习使用
  ☆70Feb 7, 2020Updated 6 years ago
• wonderkun / CTFENV

  View on GitHub
  为应对CTF比赛而搭建的各种环境
  ☆156May 9, 2020Updated 5 years ago
• threedr3am / FindClassInJars

  View on GitHub
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Mar 25, 2020Updated 5 years ago
• Y4er / CVE-2020-2551

  View on GitHub
  Weblogic IIOP CVE-2020-2551
  ☆340Apr 7, 2020Updated 5 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• tobechenghuai / Shiro_721_Padding_Oracle_RCE

  View on GitHub
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆67Nov 20, 2019Updated 6 years ago
• threedr3am / fastjson-blacklist

  View on GitHub
  打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
  ☆32Jan 3, 2020Updated 6 years ago
• ring04h / iproxy

  View on GitHub
  HTTP/HTTPS proxy server by golang [high performance version]
  ☆54Jul 25, 2020Updated 5 years ago
• Li4n0 / My-CTF-Challenges

  View on GitHub
  My CTF Challenges
  ☆16Nov 6, 2024Updated last year
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆436May 8, 2023Updated 2 years ago
• Ramos-dev / graph4code

  View on GitHub
  超硬核！使用图数据技术发现软件漏洞
  ☆185Sep 1, 2021Updated 4 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 6 years ago
• Medicean / as_bypass_php_disable_functions

  View on GitHub
  antsword bypass PHP disable_functions
  ☆208Nov 18, 2022Updated 3 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆258Oct 14, 2020Updated 5 years ago
• OneSourceCat / BcelPayloadGenerator

  View on GitHub
  A fastjson payload generator
  ☆59Oct 13, 2020Updated 5 years ago
• 0Kee-Team / JavaProbe

  View on GitHub
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Apr 26, 2021Updated 4 years ago
• beched / php_disable_functions_bypass

  View on GitHub
  procfs-based PHP sandbox bypass
  ☆133Sep 19, 2018Updated 7 years ago
• jas502n / Java-Compressed-file-security

  View on GitHub
  java web 压缩文件 安全 漏洞
  ☆20Mar 17, 2020Updated 5 years ago
• proudwind / phpinfo_scanner

  View on GitHub
  一个抓取phpinfo重要信息的小工具
  ☆29Mar 5, 2019Updated 6 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• virink / webwaf

  View on GitHub
  好好打比赛、、、emmmm 投机取巧是不好的
  ☆30Sep 30, 2018Updated 7 years ago
• canc3s / gnc

  View on GitHub
  golang 版本的 nc ，支持平时使用的大部分功能，并增加了流量rc4加密
  ☆38Nov 18, 2020Updated 5 years ago
• javasec / log4j-patch

  View on GitHub
  log4j-patch 修改字节码实现补丁防御
  ☆20Dec 10, 2021Updated 4 years ago
• b1ngz / spring-boot-actuator-cloud-vul

  View on GitHub
  Spring Boot Actuator + Spring Cloud Vul Env
  ☆19Dec 25, 2019Updated 6 years ago
• BabyTeam1024 / Docker_WeblogicAutoBuild

  View on GitHub
  ☆12Nov 16, 2020Updated 5 years ago
• allyshka / Rogue-MySql-Server

  View on GitHub
  MySQL fake server for read files of connected clients
  ☆606Jul 23, 2017Updated 8 years ago
• uknowsec / BurpSuite-Extender-fastjson

  View on GitHub
  Reference：https://www.w2n1ck.com/article/44/
  ☆155Mar 7, 2020Updated 5 years ago
• iSafeBlue / redis-rce

  View on GitHub
  Redis RCE 的几种方法
  ☆90Jun 5, 2024Updated last year
• WangYihang / Apache-HTTP-Server-Module-Backdoor

  View on GitHub
  A Simple Backdoor For Apache HTTP Server
  ☆156Aug 28, 2024Updated last year
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆210Mar 10, 2019Updated 6 years ago
• ZeddYu / HTTP-Smuggling-Lab

  View on GitHub
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆346Nov 20, 2022Updated 3 years ago
• CCob / Jboss-Wilfly-Hashes-to-Hashcat

  View on GitHub
  Converts JBoss/Wildfly management users properties file to hashcat format compatible with mode 20
  ☆12Apr 26, 2020Updated 5 years ago
• Alex-null / dfir-win

  View on GitHub
  应急响应时收集Windows机器信息
  ☆12Jul 18, 2022Updated 3 years ago
• iDigitalFlame / InYourMems

  View on GitHub
  Windows Antivirus Evasion and Memory Injection
  ☆12Feb 19, 2022Updated 3 years ago
• licy183 / c1ctf-docker-manager

  View on GitHub
  ☆18Mar 27, 2025Updated 10 months ago