RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets from ysoserial.
☆108Oct 10, 2020Updated 6 years ago
Alternatives and similar repositories for RmiTaste
Users that are interested in RmiTaste are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities☆446Sep 7, 2022Updated 4 years ago
- SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environme…☆46Dec 20, 2020Updated 5 years ago
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- A PoC that uses the DirSync protocol to poll Active Directory for changes☆13Aug 16, 2020Updated 6 years ago
- UglyEXe - bypass some AVs☆17Feb 28, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Windows Oracle Database Attack Toolkit☆79Jul 30, 2022Updated 4 years ago
- A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.☆19Jun 24, 2021Updated 5 years ago
- bypass JEP290 RaspHook code☆63Sep 21, 2020Updated 6 years ago
- A malicious LDAP server for JNDI injection attacks☆76Nov 15, 2024Updated last year
- a Ruby implementation of Java's ObjectInputStream and ObjectOutputStream.☆16May 28, 2022Updated 4 years ago
- BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.☆254Mar 6, 2025Updated last year
- Read Excel Spreadsheets (XLS/XLSX) using Cobalt Strike's Execute-Assembly☆89Sep 30, 2024Updated 2 years ago
- Essential tool for finding blind injection attacks.☆49Feb 6, 2019Updated 7 years ago
- Several XStream gadgets ported from ysoserial☆33Sep 26, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- MOGWAI LABS JMX exploitation toolkit☆204Mar 13, 2023Updated 3 years ago
- OWASP Foundation Web Respository☆36Sep 1, 2021Updated 5 years ago
- Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.☆59Aug 6, 2020Updated 6 years ago
- 010Editor Templates☆12May 29, 2024Updated 2 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆619Mar 4, 2021Updated 5 years ago
- LoadLibrary for offensive operations☆31Dec 14, 2021Updated 4 years ago
- Java RMI Vulnerability Scanner☆938Sep 3, 2026Updated 2 months ago
- Simple Live Data Collection Tool☆22Oct 4, 2020Updated 6 years ago
- JMX enumeration and attacking tool.☆517Jun 26, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Jul 13, 2020Updated 6 years ago
- ☆24Sep 26, 2021Updated 5 years ago
- Interactive Post Exploitation Tool☆37Oct 1, 2019Updated 7 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,093Jun 15, 2021Updated 5 years ago
- Pass the Hash to a named pipe for token Impersonation☆307Nov 29, 2023Updated 2 years ago
- rmi、jndi、ldap、jrmp、jmx、jms一些demo测试☆310Jun 17, 2022Updated 4 years ago
- Java RMI enumeration and attack tool.☆750Sep 28, 2017Updated 9 years ago
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 5 years ago
- Asynchronous Password Spraying Tool in C# for Windows Environments☆319Dec 19, 2023Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- JVM runtime class loading protection agent.（JVM类加载保护agent）☆48Mar 25, 2021Updated 5 years ago
- Tool for interacting with outlook interop during red team engagements☆145Jun 29, 2021Updated 5 years ago
- ☆112Aug 5, 2020Updated 6 years ago
- A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.☆440Aug 18, 2023Updated 3 years ago
- ☆46Mar 20, 2021Updated 5 years ago
- Command line tool to extract/decrypt the password that was stored in the LSA by SysInternals AutoLogon☆226Dec 5, 2020Updated 5 years ago
- Web-based check for Windows privesc vulnerabilities☆139May 14, 2023Updated 3 years ago