Writeup and environment for XCTF2021Final-Dubbo
☆44May 31, 2021Updated 5 years ago
Alternatives and similar repositories for XCTF2021Final-Dubbo
Users that are interested in XCTF2021Final-Dubbo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆77Jan 12, 2021Updated 5 years ago
- solution to buggyLoader of 0CTF/TCTF 2021 Finals☆20Sep 27, 2021Updated 4 years ago
- h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.☆54Dec 12, 2021Updated 4 years ago
- nativeRasp that can hook native methods☆23Apr 24, 2023Updated 3 years ago
- Collection of CTF Web challenges I made☆53Apr 25, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A c0 -> LLVM IR compiler, with some optimization.☆14Jul 13, 2020Updated 6 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Dec 15, 2022Updated 3 years ago
- ☆17Sep 22, 2024Updated last year
- ☆145Jan 16, 2023Updated 3 years ago
- ☆131Jun 17, 2022Updated 4 years ago
- 超硬核！使用图数据技术发现软件漏洞☆185Sep 1, 2021Updated 4 years ago
- 构造字节在ASCII范围内的jar☆142Feb 14, 2022Updated 4 years ago
- ☆41Mar 10, 2021Updated 5 years ago
- attackRmi☆259Oct 14, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 要是不做开源的话，我可能早就财务自由了吧？😅☆19Dec 20, 2021Updated 4 years ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Jan 3, 2020Updated 6 years ago
- 好好打比赛、、、emmmm 投机取巧是不好的☆30Sep 30, 2018Updated 7 years ago
- ☆26Mar 17, 2021Updated 5 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆760Apr 14, 2021Updated 5 years ago
- To solve some readflag situation in ctfs☆33Jan 12, 2021Updated 5 years ago
- PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.☆81Aug 14, 2022Updated 3 years ago
- fastjson-1.2.61-RCE☆33Sep 26, 2019Updated 6 years ago
- 静态分析及代码审计自动化相关资料收集☆300Jul 29, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SUCTF iCloudMusic 源码及writeup☆10Oct 12, 2022Updated 3 years ago
- WALA 学习笔记☆14Aug 8, 2023Updated 2 years ago
- CTF stuff☆40Jun 30, 2026Updated 3 weeks ago
- writeups for our challenges☆147Dec 11, 2022Updated 3 years ago
- D3CTF-2021-Official-Writeup☆18Mar 12, 2021Updated 5 years ago
- Java version of Tomcat-AJP-EXP, for practice☆42Oct 13, 2020Updated 5 years ago
- Weblogic环境搭建工具☆800Apr 23, 2020Updated 6 years ago
- bypass JEP290 RaspHook code☆63Sep 21, 2020Updated 5 years ago
- A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.☆768Dec 2, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- ☆350Jan 24, 2023Updated 3 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆455Mar 24, 2022Updated 4 years ago
- My CTF Challenges☆218Jan 4, 2026Updated 6 months ago
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆272Mar 4, 2022Updated 4 years ago
- source code of XCTF 2019 Final web task "tfboys"☆30Nov 21, 2022Updated 3 years ago
- a simple tool to detect potential security threat in php code☆317Sep 9, 2024Updated last year