Java命令行文件监控小工具(代码审计)
☆103Nov 29, 2021Updated 4 years ago
Alternatives and similar repositories for FileMonitor
Users that are interested in FileMonitor are comparing it to the libraries listed below
Sorting:
- Java应用的一些配置文件字典,来源于公开的字典与平时收集☆321Feb 1, 2024Updated 2 years ago
- fastjson不出网利用、c3p0☆255Jul 30, 2021Updated 4 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆117Dec 30, 2021Updated 4 years ago
- 收集内存马打入方式☆506May 20, 2022Updated 3 years ago
- 基于dbcp 的fastjson rce 回显☆197Jun 28, 2021Updated 4 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- 帆软/致远密码解密工具☆360Jul 29, 2021Updated 4 years ago
- fastjson 被动扫描、不出网payload生成☆367Nov 19, 2021Updated 4 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆342Mar 6, 2022Updated 3 years ago
- ☆237Jun 4, 2025Updated 8 months ago
- A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …☆268Oct 17, 2025Updated 4 months ago
- JDBC Connection URL Attack☆438Sep 10, 2021Updated 4 years ago
- AK资源管理工具,阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret,利用AK获取资源信息和操作资源,ECS/CVM/E2/UHOST/ECI/BCC执行命令,OSS/COS/S3/BOS…☆778Feb 13, 2025Updated last year
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆866Jun 24, 2024Updated last year
- 闭源系统半自动漏洞挖掘工具,针对 jar/war/zip 进行静态代码分析,输出从source到sink的可达路径。LLM将验证路径可达性,并根据上下文给出该路径可信分数☆502Jan 12, 2026Updated last month
- Fastjson扫描器,可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,050Oct 7, 2022Updated 3 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- 自己的JNDI 利用工具,添加一些人性化功能☆131Sep 4, 2022Updated 3 years ago
- javaeasyscanner - 富婆系列,代码审计辅助工具,致力于解放大脑,方便双手☆276Jun 18, 2024Updated last year
- 冰蝎Java WebShell自动化免杀生成☆783Mar 15, 2022Updated 3 years ago
- 获取 alibaba druid 一些 sessions , sql , urls☆292Apr 4, 2025Updated 10 months ago
- Java web路由内存分析工具☆437May 22, 2025Updated 9 months ago
- Java内存马注入工具☆252Apr 8, 2023Updated 2 years ago
- CobaltStrike4.4 一键 部署脚本 随机生成密码、key、端口号、证书等,解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计☆286Mar 19, 2022Updated 3 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆770Jan 26, 2022Updated 4 years ago
- Thinkphp3,Thinkphp5,Thinkphp6,日志泄漏批量下载。☆86Jun 7, 2022Updated 3 years ago
- ☆198Sep 26, 2024Updated last year
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- 针对目标已知信息的字典生成工具☆209Sep 21, 2022Updated 3 years ago
- 下架☆141Jan 21, 2022Updated 4 years ago
- 通过jsp脚本扫描java web Filter/Servlet型内存马☆986Mar 9, 2023Updated 2 years ago
- Java RCE 回显测试代码☆1,016Oct 15, 2020Updated 5 years ago
- 本工具的定位是快速生成Java安全相关的Payload,如内存马、反序列化链、JNDI url、Fastjson等,动态生成相关Payload,并附带相应的文档。☆93Feb 25, 2025Updated last year
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- JavaPassDump☆272Jan 7, 2022Updated 4 years ago
- 利用字符集编码绕过waf的burpsuite插件☆124Mar 22, 2021Updated 4 years ago
- rmi打内存马工具,适用于目标用不了ldap的情况☆254Jul 12, 2023Updated 2 years ago