TheKingOfDuck / BypassAVAddUsers

Related projects ⓘ

Alternatives and complementary repositories for BypassAVAddUsers

• admintony / shiro_rememberMe_Rce
  利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。
  ☆123Updated 4 years ago
• yzddmr6 / antSword_old
  AntSword is a cross-platform website management toolkit.
  ☆48Updated 4 years ago
• r35tart / RedisDirScan
  此脚本用于测试 Rdies 未授权访问，在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下，进行WEB目录探测
  ☆73Updated 5 years ago
• feihong-cs / JspMaster-Deprecated
  一款基于webshell命令执行功能实现的GUI webshell管理工具，支持流量加密
  ☆216Updated 3 years ago
• w0x68y / bypassWAF
  bypassD盾、安全狗、云锁
  ☆106Updated 3 years ago
• whirlwind110 / tphack
  Thinkphp3/5 Log文件泄漏利用工具
  ☆60Updated 6 years ago
• jas502n / CVE-2019-2888
  WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)
  ☆58Updated 5 years ago
• anhilo / xiaogongju
  EW重构计划
  ☆63Updated 8 years ago
• Jumbo-WJB / burp_find_shiro
  通过burp代理流量寻找shiro站点
  ☆61Updated 4 years ago
• fuhei / tongda_rce
  通达OA RCE漏洞
  ☆79Updated 4 years ago
• StarkChristmas / Shiro_exploit
  Apache Shiro Java Analysis and Utilization of Deserialization Vulnerabilities
  ☆39Updated 4 years ago
• DSO-Lab / defvul
  DSO-Lab 漏洞研究成果整理
  ☆83Updated 2 years ago
• phantom0301 / PTscan
  Phantom scanner——An interface friendly and lightweight web assets scanner
  ☆65Updated 7 years ago
• uknowsec / BurpSuite-Extender-fastjson
  Reference：https://www.w2n1ck.com/article/44/
  ☆152Updated 4 years ago
• RandomSiYuan / Fake_Sqli_Bypass
  Fake框架的自动化Fuzz WAF/IDS 功能
  ☆85Updated 5 years ago
• TheKingOfDuck / paramFuzzer
  一款高效的参数fuzz工具|A faster param fuzzing test tool
  ☆99Updated 4 years ago
• truongnctrieu / CThun
  集成快速端口扫描服务识别和暴力破解
  ☆45Updated 5 years ago
• TheKingOfDuck / XSS-Fishing2-CS
  鱼儿在cs上线后自动收杆|Automatically stop fishing in javascript after the fish is hooked
  ☆134Updated 4 years ago
• yzddmr6 / JspForAntSword
  中国蚁剑JSP一句话Payload
  ☆118Updated 4 years ago
• LS95 / gopher-redis-auth
  This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。
  ☆110Updated 5 years ago
• sv3nbeast / CVE-2020-1938-Tomact-file_include-file_read
  Tomcat的文件包含及文件读取漏洞利用POC
  ☆52Updated 4 years ago
• langligelang / CAS_EXP
  CAS 硬编码 远程代码执行漏洞
  ☆126Updated 3 years ago
• JE2Se / J2ExpSuite
  一个以python3编写的的漏洞检测框架，可自定义，添加poc，exp，，不需要修改其他内容，只需要编写POC自动执行检测
  ☆47Updated 4 years ago