Mr-xn/JNDIExploit-1 external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Mr-xn/JNDIExploit-1

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Mr-xn/JNDIExploit-1)

Close

Mr-xn / JNDIExploit-1View on GitHubMore

• External links
• Readme badge

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

☆347Aug 8, 2025Updated 11 months ago

Alternatives and similar repositories for JNDIExploit-1

Users that are interested in JNDIExploit-1 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆777Jan 26, 2022Updated 4 years ago
• ahisec / geoserver-

  View on GitHub
  geoserver CVE-2024-36401漏洞利用工具
  ☆46Jul 24, 2024Updated 2 years ago
• SummerSec / ShiroAttack2

  View on GitHub
  shiro反序列化漏洞综合利用（仅限授权测试使用）
  ☆2,606Jun 4, 2026Updated last month
• Schira4396 / VcenterKiller

  View on GitHub
  一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…
  ☆1,479Apr 25, 2024Updated 2 years ago
• Tas9er / ByPassBehinder4J

  View on GitHub
  冰蝎Java WebShell自动化免杀生成
  ☆781Mar 15, 2022Updated 4 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• SummerSec / SpringBootExploit

  View on GitHub
  项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。
  ☆1,902Jan 15, 2024Updated 2 years ago
• xinyu2428 / TDOA_RCE

  View on GitHub
  通达OA综合利用工具
  ☆519Mar 17, 2021Updated 5 years ago
• Jeromeyoung / JNDIExploit-1

  View on GitHub
  一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。
  ☆377Oct 22, 2021Updated 4 years ago
• KimJun1010 / WeblogicTool

  View on GitHub
  WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）
  ☆1,793Nov 1, 2023Updated 2 years ago
• Tas9er / ByPassBehinder

  View on GitHub
  ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er
  ☆841May 28, 2022Updated 4 years ago
• whwlsfb / JDumpSpider

  View on GitHub
  HeapDump敏感信息提取工具
  ☆1,675Dec 15, 2025Updated 7 months ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,020May 21, 2024Updated 2 years ago
• c0ny1 / FastjsonExploit

  View on GitHub
  Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
  ☆1,405Dec 16, 2022Updated 3 years ago
• BambiZombie / FrchannelPlus

  View on GitHub
  帆软bi反序列化漏洞利用工具
  ☆199Mar 23, 2024Updated 2 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• Chave0v0 / YONYOU-TOOL

  View on GitHub
  用友漏洞综合利用工具
  ☆268Nov 9, 2024Updated last year
• sp4zcmd / WeblogicExploit-GUI

  View on GitHub
  Weblogic漏洞利用图形化工具 支持注入内存马、一键上传webshell、命令执行
  ☆783Apr 20, 2022Updated 4 years ago
• netuseradministrator / Geoserver_gui_exp

  View on GitHub
  Geoserver综合利用工具
  ☆128Jan 7, 2026Updated 6 months ago
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,034Jan 3, 2025Updated last year
• Ryze-T / Sylas

  View on GitHub
  数据库综合利用工具
  ☆544Feb 16, 2022Updated 4 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆256Jul 12, 2023Updated 3 years ago
• pmiaowu / log4j2Scan

  View on GitHub
  用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件
  ☆211Apr 18, 2023Updated 3 years ago
• a1phaboy / FastjsonScan

  View on GitHub
  Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
  ☆1,056Oct 7, 2022Updated 3 years ago
• safe6Sec / ShiroExp

  View on GitHub
  shiro综合利用工具
  ☆654Apr 15, 2023Updated 3 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• Hel10-Web / Databasetools

  View on GitHub
  一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接
  ☆868Aug 30, 2023Updated 2 years ago
• wyzxxz / heapdump_tool

  View on GitHub
  heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等
  ☆1,451May 21, 2024Updated 2 years ago
• savior-only / Spring_All_Reachable

  View on GitHub
  Spring漏洞综合利用工具
  ☆681Jun 26, 2026Updated 3 weeks ago
• SafeGroceryStore / MDUT

  View on GitHub
  MDUT - Multiple Database Utilization Tools
  ☆2,243Updated this week
• Lotus6 / ConfluenceMemshell

  View on GitHub
  Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入
  ☆563Feb 1, 2024Updated 2 years ago
• wyzxxz / aksk_tool

  View on GitHub
  AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…
  ☆789Feb 13, 2025Updated last year
• safe6Sec / GolangBypassAV

  View on GitHub
  研究利用golang各种姿势bypassAV
  ☆816Apr 11, 2022Updated 4 years ago
• c0olw / NacosRce

  View on GitHub
  Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用
  ☆854Jul 7, 2023Updated 3 years ago
• wyzxxz / shiro_rce_tool

  View on GitHub
  shiro 反序列 命令执行辅助检测工具
  ☆1,590May 21, 2024Updated 2 years ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• wgpsec / YongYouNcTool

  View on GitHub
  用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等
  ☆597Aug 19, 2023Updated 2 years ago
• woodpecker-framework / ysoserial-for-woodpecker

  View on GitHub
  给woodpecker框架量身定制的ysoserial
  ☆630Oct 26, 2022Updated 3 years ago
• achuna33 / MYExploit

  View on GitHub
  OAExploit一款基于产品的一键扫描工具。
  ☆1,485Sep 20, 2022Updated 3 years ago
• amaz1ngday / fastjson-exp

  View on GitHub
  fastjson利用，支持tomcat、spring回显，哥斯拉内存马；回显利用链为dhcp、ibatis、c3p0。
  ☆331Mar 15, 2022Updated 4 years ago
• pureqh / Hyacinth

  View on GitHub
  一款java漏洞集合工具
  ☆1,138Jan 13, 2026Updated 6 months ago
• 7wkajk / Frchannel

  View on GitHub
  帆软bi反序列化漏洞利用工具
  ☆425Jan 25, 2025Updated last year
• MInggongK / Penetration-mining-src

  View on GitHub
  一款集成了H3C,致远，泛微，万户，帆软，海康威视，金蝶云星空，畅捷通，Struts等多个RCE漏洞利用工具
  ☆248Jul 28, 2024Updated last year