LeadroyaL/java_xxe_2019 external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

LeadroyaL/java_xxe_2019

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/LeadroyaL/java_xxe_2019)

Close

LeadroyaL / java_xxe_2019View on GitHubMore

• External links
• Readme badge

总结了一下2019年在JVM环境中使用XXE攻击的知识

☆58Oct 31, 2019Updated 6 years ago

Alternatives and similar repositories for java_xxe_2019

Users that are interested in java_xxe_2019 are comparing it to the libraries listed below

• aleenzz / CVE-2020-10199

  View on GitHub
  CVE-2020-10199 回显版本
  ☆31Jun 24, 2024Updated last year
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 6 years ago
• LeadroyaL / java-xxe-defense-demo

  View on GitHub
  java xxe defense demo
  ☆49Jul 18, 2019Updated 6 years ago
• jas502n / xray-crack

  View on GitHub
  xray社区高级版证书生成，支持到 1.2.0 版本
  ☆35Nov 21, 2020Updated 5 years ago
• l3m0n / whatweb

  View on GitHub
  更快速的进行Web应用指纹识别
  ☆170May 9, 2019Updated 6 years ago
• jas502n / fastjson-1.2.61-RCE

  View on GitHub
  fastjson-1.2.61-RCE
  ☆33Sep 26, 2019Updated 6 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 6 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload

  View on GitHub
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Feb 8, 2020Updated 6 years ago
• Ch1ngg / OtherAntSwordAESEncoder

  View on GitHub
  蚁剑其他脚本AES编/解码器
  ☆36Aug 28, 2019Updated 6 years ago
• jas502n / DBconfigReader

  View on GitHub
  泛微ecology OA系统接口存在数据库配置信息泄露漏洞
  ☆50Jul 13, 2020Updated 5 years ago
• jas502n / CVE-2019-11580

  View on GitHub
  CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE
  ☆106Jul 18, 2019Updated 6 years ago
• hackping / XXEpayload

  View on GitHub
  ☆85Oct 8, 2019Updated 6 years ago
• Cyri1s / cobalt-strike-persistence

  View on GitHub
  cobalt strike 自启动脚本
  ☆71Aug 23, 2016Updated 9 years ago
• Y4er / yaml-payload

  View on GitHub
  Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg
  ☆135Sep 24, 2020Updated 5 years ago
• OneSourceCat / BcelPayloadGenerator

  View on GitHub
  A fastjson payload generator
  ☆59Oct 13, 2020Updated 5 years ago
• 0Kee-Team / JavaProbe

  View on GitHub
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Apr 26, 2021Updated 4 years ago
• imagemlt / rootit.ko

  View on GitHub
  linux内核提权后门模块demo
  ☆36Jun 11, 2019Updated 6 years ago
• jas502n / Shiro_Xray

  View on GitHub
  CommonsBeanutils1,CommonsCollectionsK1
  ☆58Nov 16, 2020Updated 5 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆835Jun 7, 2022Updated 3 years ago
• jas502n / jackson-CVE-2020-8840

  View on GitHub
  FasterXML/jackson-databind 远程代码执行漏洞
  ☆73Feb 21, 2020Updated 6 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆436May 8, 2023Updated 2 years ago
• Airboi / Citrix-ADC-RCE-CVE-2020-8193

  View on GitHub
  Citrix ADC从权限绕过到RCE
  ☆45Jul 12, 2020Updated 5 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• biggerwing / nsfocus-rsas-knowledge-base

  View on GitHub
  绿盟科技漏洞扫描器(RSAS)漏洞库
  ☆366May 30, 2019Updated 6 years ago
• rabbitmask / WeblogicScanLot

  View on GitHub
  WeblogicScanLot系列，Weblogic漏洞批量检测工具，V2.2
  ☆184Aug 1, 2020Updated 5 years ago
• Symbo1 / HackerOne-Staffs

  View on GitHub
  HackerOne Staffs
  ☆29Dec 9, 2019Updated 6 years ago
• threedr3am / FindClassInJars

  View on GitHub
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Mar 25, 2020Updated 5 years ago
• Werneror / AutoSrc

  View on GitHub
  一个轻量级、多线程、支持管道的自动化互联网漏洞挖掘框架。
  ☆21Oct 30, 2018Updated 7 years ago
• l3yx / springboot-shiro

  View on GitHub
  ☆16Jul 25, 2023Updated 2 years ago
• jas502n / SHIRO-550

  View on GitHub
  Shiro RememberMe 1.2.4 反序列化 漏洞
  ☆56Oct 25, 2019Updated 6 years ago
• jiangsir404 / pbscan

  View on GitHub
  基于burpsuite headless 的代理式被动扫描系统
  ☆95Feb 10, 2020Updated 6 years ago
• jas502n / ThinkCMF_getshell

  View on GitHub
  ThinkCMF 框架上的任意内容包含漏洞
  ☆36Oct 28, 2019Updated 6 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• uknowsec / BurpSuite-Extender-fastjson

  View on GitHub
  Reference：https://www.w2n1ck.com/article/44/
  ☆155Mar 7, 2020Updated 5 years ago
• QAX-A-Team / HideShell

  View on GitHub
  A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.
  ☆216Mar 31, 2019Updated 6 years ago
• Cryin / Paper

  View on GitHub
  Web Security Technology & Vulnerability Analysis Whitepapers
  ☆549Jan 1, 2019Updated 7 years ago
• uknowsec / Frida-Hook-In-Java-Notes

  View on GitHub
  Java层frida hook学习笔记 https://uknowsec.cn
  ☆47Feb 6, 2020Updated 6 years ago
• inspiringz / Shiro-721

  View on GitHub
  Shiro-721 RCE Via RememberMe Padding Oracle Attack
  ☆269Oct 29, 2020Updated 5 years ago
• pyn3rd / Apache-Tomcat-MongoDB-Remote-Code-Execution

  View on GitHub
  Apache Tomcat + MongoDB Remote Code Execution
  ☆113Jan 15, 2021Updated 5 years ago