SecCoder-Security-Lab/jdbc-sqlxml-xxe external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

SecCoder-Security-Lab/jdbc-sqlxml-xxe

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/SecCoder-Security-Lab/jdbc-sqlxml-xxe)

Close

SecCoder-Security-Lab / jdbc-sqlxml-xxeView on GitHubMore

• External links
• Readme badge

h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.

☆54Dec 12, 2021Updated 4 years ago

Alternatives and similar repositories for jdbc-sqlxml-xxe

Users that are interested in jdbc-sqlxml-xxe are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• SecCoder-Security-Lab / spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

  View on GitHub
  Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053
  ☆37Dec 15, 2022Updated 3 years ago
• Dor-Tumarkin / CVE-2021-25641-Proof-of-Concept

  View on GitHub
  Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…
  ☆53Jun 6, 2021Updated 5 years ago
• LFYSec / XCTF2021Final-Dubbo

  View on GitHub
  Writeup and environment for XCTF2021Final-Dubbo
  ☆44May 31, 2021Updated 5 years ago
• zwjjustdoit / Xstream-1.4.17

  View on GitHub
  XSTREAM<=1.4.17漏洞复现（CVE-2021-39141、CVE-2021-39144、CVE-2021-39150）
  ☆62Aug 25, 2021Updated 4 years ago
• SummerSec / LookupInterface

  View on GitHub
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆166Apr 10, 2022Updated 4 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• Y4er / CVE-2021-35215

  View on GitHub
  SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE
  ☆47Oct 23, 2021Updated 4 years ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆94Jan 17, 2023Updated 3 years ago
• BeichenDream / Kcon2021Code

  View on GitHub
  ☆274Oct 28, 2021Updated 4 years ago
• EXP-Docs / CVE-2020-13277

  View on GitHub
  CVE-2020-13277 靶场： Gitlab 逻辑漏洞 - 任意用户越权访问私有仓库
  ☆28Jan 24, 2023Updated 3 years ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆450Sep 10, 2021Updated 4 years ago
• Y4er / openam-CVE-2021-35464

  View on GitHub
  openam-CVE-2021-35464 tomcat 执行命令回显
  ☆88Dec 15, 2022Updated 3 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆259Oct 14, 2020Updated 5 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆760Apr 14, 2021Updated 5 years ago
• hhxy / e-message_exp

  View on GitHub
  e-mesaage <=4.15 后台jar包上传exp
  ☆47Mar 15, 2019Updated 7 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 5 years ago
• c0ny1 / ascii-jar

  View on GitHub
  构造字节在ASCII范围内的jar
  ☆142Feb 14, 2022Updated 4 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆272Mar 4, 2022Updated 4 years ago
• cckuailong / YarnRpcRCE

  View on GitHub
  ☆83Nov 20, 2021Updated 4 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆455Mar 24, 2022Updated 4 years ago
• laluka / jolokia-exploitation-toolkit

  View on GitHub
  jolokia-exploitation-toolkit
  ☆318Dec 19, 2024Updated last year
• ceclin / 0ctf-2021-finals-soln-buggy-loader

  View on GitHub
  solution to buggyLoader of 0CTF/TCTF 2021 Finals
  ☆20Sep 27, 2021Updated 4 years ago
• 5wimming / gadgetinspector

  View on GitHub
  利用链、漏洞检测工具
  ☆375Jul 31, 2024Updated 2 years ago
• SummerSec / SPATool

  View on GitHub
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆135Jul 12, 2023Updated 3 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• langligelang / maobugs

  View on GitHub
  java 漏洞平台包含各种CVE
  ☆23Jun 17, 2022Updated 4 years ago
• jespinhara / j-is-the-boss

  View on GitHub
  ☆24Apr 21, 2022Updated 4 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms

  View on GitHub
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆311Jun 17, 2022Updated 4 years ago
• threedr3am / log-agent

  View on GitHub
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆123Jul 17, 2020Updated 6 years ago
• threedr3am / fastjson-blacklist

  View on GitHub
  打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
  ☆32Jan 3, 2020Updated 6 years ago
• potats0 / AgentMemShellScanner

  View on GitHub
  清除基于java agent木马
  ☆79Apr 12, 2021Updated 5 years ago
• BeichenDream / Chunk-Proxy

  View on GitHub
  ☆296May 7, 2022Updated 4 years ago
• feihong-cs / memShell

  View on GitHub
  FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
  ☆390Nov 6, 2020Updated 5 years ago
• Imanfeng / Apache-Solr-RCE

  View on GitHub
  Apache Solr Exploits 🌟
  ☆347Oct 13, 2020Updated 5 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• fengupupup / RocB

  View on GitHub
  鹏 RocB - Java代码审计IDEA插件 SAST
  ☆148Sep 16, 2021Updated 4 years ago
• baidu-security / openrasp-iast

  View on GitHub
  IAST 灰盒扫描工具
  ☆446Jul 19, 2022Updated 4 years ago
• threedr3am / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆212Jan 17, 2022Updated 4 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• QAX-A-Team / ptrace

  View on GitHub
  a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志
  ☆242May 8, 2019Updated 7 years ago
• wdahlenburg / spring-gateway-demo

  View on GitHub
  Sample Spring application to Demonstrate the Gateway Actuator
  ☆49Mar 3, 2022Updated 4 years ago
• Rvn0xsy / zipcreater

  View on GitHub
  ZipCreater主要应用于跨目录的文件上传漏洞的利用，它能够快速进行压缩包生成。
  ☆184Apr 6, 2022Updated 4 years ago