NS-Sp4ce / TongDaOA-Fake-UserView external linksLinks
通达OA 任意用户登录漏洞
☆360Aug 27, 2020Updated 5 years ago
Alternatives and similar repositories for TongDaOA-Fake-User
Users that are interested in TongDaOA-Fake-User are comparing it to the libraries listed below
Sorting:
- fastjson 1.2.68 版本 autotype bypass☆142Jun 17, 2022Updated 3 years ago
- Thinkphp rce扫描脚本,附带日志扫描☆241Jun 19, 2020Updated 5 years ago
- Shiro<=1.2.4反序列化,一键检测工具☆989Mar 4, 2021Updated 4 years ago
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞,一键注册蚁剑filter内存shell☆535Aug 25, 2020Updated 5 years ago
- Shiro550/Shiro721 一键化利用工具,支持多种回显方式☆1,949Jun 4, 2021Updated 4 years ago
- Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测☆521May 21, 2020Updated 5 years ago
- TongdaOA 11.7 ~11.8 通达OA,任意用户登录+后台getshell☆86Jul 16, 2021Updated 4 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持☆969Jun 16, 2024Updated last year
- Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)☆874Dec 16, 2022Updated 3 years ago
- Struts2系列漏洞检查工具☆435Sep 27, 2019Updated 6 years ago
- 内网渗透中常用的c#程序整合成cs脚本,直接内存加载。持续更新~☆498Feb 13, 2020Updated 6 years ago
- 通达OA综合利用工具☆516Mar 17, 2021Updated 4 years ago
- Weblogic一键漏洞检测工具,V1.5,更新时间:20200730☆2,263May 22, 2023Updated 2 years ago
- Burp suite 分块传输辅助插件☆2,021Feb 23, 2022Updated 3 years ago
- CobaltStrike后渗透测试插件☆1,554Oct 28, 2021Updated 4 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,185Nov 10, 2021Updated 4 years ago
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具☆2,011May 21, 2024Updated last year
- Shiro反序列化回显利用、内存shell、检查 Burp插件☆217Sep 1, 2022Updated 3 years ago
- Shiro反序列化利用工具,支持新版本(AES-GCM)Shiro的key爆破,配合ysoserial,生成回显Payload☆898May 28, 2021Updated 4 years ago
- Tomcat 冰蝎内存马。☆214Sep 14, 2020Updated 5 years ago
- 一键ThinkPHP漏洞检测☆1,162Nov 1, 2023Updated 2 years ago
- ☆318Jun 4, 2021Updated 4 years ago
- 对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描☆915Dec 8, 2022Updated 3 years ago
- Struts2全漏洞扫描利用工具☆2,209Jul 12, 2021Updated 4 years ago
- shiro 反序列 命令执行辅助检测工具☆1,558May 21, 2024Updated last year
- Cobalt Strike插件 - RDP日志取证&清除☆363Dec 23, 2019Updated 6 years ago
- CVE-2019-2725 命令回显☆436May 8, 2023Updated 2 years ago
- 红队工具:各大OA利用工具,万户、致远、通达等☆259Jul 23, 2021Updated 4 years ago
- Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang☆573Jan 10, 2022Updated 4 years ago
- 记录自己编写、修改的部分工具☆1,462Oct 19, 2025Updated 3 months ago
- sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。☆717Aug 3, 2021Updated 4 years ago
- Shiro-550 不依赖CC链利用工具☆451Jun 19, 2024Updated last year
- tomcat使用了自带session同步功能时,不安全的配置(没有使用EncryptInterceptor)导致存在的反序列化漏洞,通过精心构造的数据包, 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484,9484…☆212May 19, 2020Updated 5 years ago
- 2021 hw☆1,203Nov 14, 2023Updated 2 years ago
- 新版将不再对外公开发布。天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端,支持跨平台运行,目前基于JDK1.8开发,运行必须安装JDK或JRE 1.8,注意不能是open jdk,只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebSh…☆387Mar 22, 2021Updated 4 years ago
- 通过 Redis 主从写出无损文件☆719May 25, 2020Updated 5 years ago
- Tomcat-Ajp协议文件读取漏洞☆795Mar 3, 2020Updated 5 years ago
- 阿里云accesskey利用工具☆1,223Apr 8, 2022Updated 3 years ago
- 通达OA RCE漏洞☆78Mar 18, 2020Updated 5 years ago