Java命令行文件监控小工具(代码审计)
☆106Nov 29, 2021Updated 4 years ago
Alternatives and similar repositories for FileMonitor
Users that are interested in FileMonitor are comparing it to the libraries listed below
Sorting:
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- fastjson不出网利用、c3p0☆256Jul 30, 2021Updated 4 years ago
- 基于dbcp的fastjson rce 回显☆197Jun 28, 2021Updated 4 years ago
- 收集内存马打入方式☆507May 20, 2022Updated 3 years ago
- fastjson 被动扫描、不出网payload生成☆367Nov 19, 2021Updated 4 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- 记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。☆117Dec 30, 2021Updated 4 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆341Mar 6, 2022Updated 4 years ago
- ☆242Feb 28, 2026Updated 2 weeks ago
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆870Jun 24, 2024Updated last year
- A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …☆268Oct 17, 2025Updated 5 months ago
- 帆软/致远密码解密工具☆359Jul 29, 2021Updated 4 years ago
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆506Jan 12, 2026Updated 2 months ago
- Java web路由内存分析工具☆438May 22, 2025Updated 9 months ago
- JDBC Connection URL Attack☆441Sep 10, 2021Updated 4 years ago
- javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手☆277Jun 18, 2024Updated last year
- AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…☆779Feb 13, 2025Updated last year
- 自己的JNDI 利用工具，添加一些人性化功能☆131Sep 4, 2022Updated 3 years ago
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,050Oct 7, 2022Updated 3 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- 获取 alibaba druid 一些 sessions , sql , urls☆313Apr 4, 2025Updated 11 months ago
- Java内存马注入工具☆252Apr 8, 2023Updated 2 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- JavaPassDump☆272Jan 7, 2022Updated 4 years ago
- 给woodpecker框架量身定制的ysoserial☆612Oct 26, 2022Updated 3 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆321Dec 9, 2021Updated 4 years ago
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆91Sep 2, 2022Updated 3 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆461Jan 12, 2025Updated last year
- 🔎 crx-scouter.js can detect which Chrome extensions we are using quietly.☆147Oct 6, 2023Updated 2 years ago
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- 本工具的定位是快速生成Java安全相关的Payload，如内存马、反序列化链、JNDI url、Fastjson等，动态生成相关Payload，并附带相应的文档。☆93Feb 25, 2025Updated last year
- rmi打内存马工具，适用于目 标用不了ldap的情况☆253Jul 12, 2023Updated 2 years ago
- 冰蝎Java WebShell自动化免杀生成☆783Mar 15, 2022Updated 4 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆770Jan 26, 2022Updated 4 years ago
- 代码审计知识点整理-Java☆529Jun 15, 2020Updated 5 years ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆552Dec 7, 2025Updated 3 months ago
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,468Apr 25, 2024Updated last year