Svti / Axis2Shell

Related projects ⓘ

Alternatives and complementary repositories for Axis2Shell

• wh1t3p1g / Struts2Environment
  Struts2 历史版本的漏洞环境
  ☆83Updated 7 years ago
• Tycx2ry / docker_api_vul
  docker 未授权访问漏洞利用脚本
  ☆141Updated 8 years ago
• jas502n / CVE-2019-2888
  WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)
  ☆58Updated 5 years ago
• wuppp / shiro_rce_exp
  Shiro RCE (Padding Oracle Attack)
  ☆142Updated 5 years ago
• phantom0301 / PTscan
  Phantom scanner——An interface friendly and lightweight web assets scanner
  ☆65Updated 7 years ago
• r35tart / RedisDirScan
  此脚本用于测试 Rdies 未授权访问，在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下，进行WEB目录探测
  ☆73Updated 5 years ago
• kingkaki / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆101Updated 4 years ago
• jiansiting / CVE-2019-2725
  weblogic绕过和wls远程执行
  ☆36Updated 5 years ago
• fuhei / tongda_rce
  通达OA RCE漏洞
  ☆79Updated 4 years ago
• black-mirror / Weblogic
  Weblogic CVE-2019-2725 CVE-2019-2729 Getshell 命令执行
  ☆68Updated 5 years ago
• StarkChristmas / Shiro_exploit
  Apache Shiro Java Analysis and Utilization of Deserialization Vulnerabilities
  ☆39Updated 4 years ago
• LS95 / gopher-redis-auth
  This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。
  ☆110Updated 5 years ago
• Ch1ngg / WebLogicPasswordDecryptorUi
  解密weblogic AES或DES加密方法
  ☆225Updated 3 years ago
• shengqi158 / Jackson-databind-RCE-PoC
  ☆80Updated 6 years ago
• crupper / Forensics-Tool-Wiki
  ☆18Updated 8 years ago
• sv3nbeast / 2019_Vul_warning_Poc_Collect
  整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善
  ☆113Updated 4 years ago
• uknowsec / BurpSuite-Extender-fastjson
  Reference：https://www.w2n1ck.com/article/44/
  ☆152Updated 4 years ago
• admintony / shiro_rememberMe_Rce
  利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。
  ☆123Updated 4 years ago
• potats0 / pyShell
  a management tool
  ☆36Updated last year
• DSO-Lab / defvul
  DSO-Lab 漏洞研究成果整理
  ☆83Updated 2 years ago
• coffeehb / struts2_check
  一个用于识别目标网站是否采用Struts2框架开发的工具demo
  ☆162Updated 6 years ago
• jas502n / SHIRO-550
  Shiro RememberMe 1.2.4 反序列化 漏洞
  ☆52Updated 5 years ago
• RandomSiYuan / Fake_Sqli_Bypass
  Fake框架的自动化Fuzz WAF/IDS 功能
  ☆85Updated 5 years ago
• idlefire / Termite
  Source: http://rootkiter.com/Termite/
  ☆25Updated 7 years ago
• 5alt / VulHint
  VulHint是辅助代码审计的 sublime text 3 插件
  ☆67Updated 6 years ago
• Qclover / jsspider
  A js infomation dig tool.
  ☆68Updated 4 years ago
• 88ai / Vulnerability-analysis
  Vulnerability-analysis Poc、python shell
  ☆59Updated 5 years ago
• JulianWu520 / DriedMango
  GUI Exploit Tool For RedTeam
  ☆7Updated 3 years ago