LeadroyaL / java-xxe-defense-demo

Related projects: ⓘ

• Ramos-dev / R9000
  ☆58Updated 4 years ago
• shengqi158 / Jackson-databind-RCE-PoC
  ☆80Updated 6 years ago
• jas502n / SHIRO-721
  RememberMe Padding Oracle Vulnerability RCE
  ☆71Updated 4 years ago
• Afant1 / RemoteObjectInvocationHandler
  bypass JEP290 RaspHook code
  ☆63Updated 4 years ago
• cowtowncoder / jackson-compat-minor
  Test repository for verifying compatibility between adjacent minor versions
  ☆35Updated 3 months ago
• Lonely-night / fastjson_gadgets_scanner
  ☆129Updated 2 years ago
• jas502n / fastjson-1.2.61-RCE
  fastjson-1.2.61-RCE
  ☆33Updated 4 years ago
• gitrobtest / Java-Security
  Java Security Documents
  ☆79Updated 5 years ago
• jas502n / fastjson-RCE
  fastjson-1.2.47
  ☆64Updated 5 years ago
• proudwind / struts2_vulns
  Struts2 vuln env
  ☆44Updated last year
• Ruil1n / after-deserialization-attack
  Java After-Deserialization Attack
  ☆77Updated 3 years ago
• iSafeBlue / fastjson-autotype-bypass-demo
  fastjson 1.2.68 版本 autotype bypass
  ☆140Updated 2 years ago
• jas502n / fastjson-1.2.58-rce
  fastjson-1.2.58-rce with h2 database
  ☆33Updated 5 years ago
• genxor / Deserialize
  ☆70Updated 5 years ago
• Ramos-dev / jniwebshell
  ☆29Updated this week
• threedr3am / FindClassInJars
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Updated 4 years ago
• jas502n / kibana-RCE
  kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609
  ☆90Updated 4 years ago
• 5alt / VulHint
  VulHint是辅助代码审计的 sublime text 3 插件
  ☆67Updated 5 years ago
• b1ngz / spring-boot-actuator-cloud-vul
  Spring Boot Actuator + Spring Cloud Vul Env
  ☆19Updated 4 years ago
• bit4woo / Java_deserialize_vuln_lab
  Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
  ☆88Updated 5 years ago
• cL0und / cas4.x-execution-rce
  ☆74Updated this week
• jas502n / Fortify_Rule
  ☆29Updated this week
• Qclover / jsspider
  A js infomation dig tool.
  ☆68Updated 4 years ago
• kingkaki / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆100Updated 4 years ago
• iceMatcha / Shiro_721_Padding_Oracle_RCE
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆68Updated 4 years ago
• jas502n / SHIRO-550
  Shiro RememberMe 1.2.4 反序列化 漏洞
  ☆52Updated 4 years ago
• tongasdp / tongasdp-test
  TongASDP漏洞测试环境
  ☆33Updated last year
• Mote-Z / Java-Security
  ☆15Updated this week
• pyn3rd / My-Sharing-Slides
  ☆81Updated this week