Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul
☆93Oct 30, 2023Updated 2 years ago
Alternatives and similar repositories for fastjson_study
Users that are interested in fastjson_study are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Java CVE Vulnerability Environment☆45Jun 11, 2024Updated 2 years ago
- burp手工检测fastjson辅助☆87Mar 4, 2024Updated 2 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆134Oct 12, 2024Updated 2 years ago
- ☆521Sep 16, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆15Jul 7, 2024Updated 2 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆573Sep 12, 2026Updated last month
- 收集内存马打入方式☆507May 20, 2022Updated 4 years ago
- A Go library for generating Java deserialization payloads.☆151Sep 9, 2024Updated 2 years ago
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,249Jul 12, 2024Updated 2 years ago
- 支持注入内存马和Bypass WAF☆28Dec 12, 2023Updated 2 years ago
- Godzilla插件|内存马|Suo5内存代理｜自定义字节码执行｜memShellParty-Godzilla☆247Sep 14, 2026Updated last month
- Fastjson姿势技巧集合☆1,858Oct 20, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理☆297Aug 8, 2023Updated 3 years ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆141Mar 11, 2024Updated 2 years ago
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- CVE-2022-22947注入哥斯拉内存马☆27Jun 21, 2023Updated 3 years ago
- 本工具为jeecg框架漏洞利用工具非jeecg-boot！☆181Aug 13, 2024Updated 2 years ago
- 一款针对Shiro550漏洞进行快速漏洞利用工具。 对 @SummerSec 大佬的项目https://github.com/SummerSec/ShiroAttack2 进行了一些改进。☆250May 29, 2023Updated 3 years ago
- fastjson 80 远程代码执行漏洞复现☆197Sep 7, 2022Updated 4 years ago
- 一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆864Aug 30, 2023Updated 3 years ago
- xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作，上传，job等相应操作。☆193Nov 25, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Netty/WebFlux 内存马☆26Nov 19, 2023Updated 2 years ago
- MySQL_Fake_Server-啄木鸟yso适配版☆46Sep 20, 2024Updated 2 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 3 years ago
- 哥斯拉jsp/jspx免杀webshell生成器☆208Apr 28, 2023Updated 3 years ago
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆28Sep 28, 2025Updated last year
- 泛微oa漏洞利用工具☆259Jan 4, 2023Updated 3 years ago
- JndiBypass漏洞利用，可动态生成类，防止类注入冲突☆27Aug 16, 2023Updated 3 years ago
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆601May 4, 2026Updated 5 months ago
- 用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看☆125Apr 17, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆251Apr 15, 2026Updated 6 months ago
- Mssql利用工具☆278Aug 7, 2023Updated 3 years ago
- javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手☆278Jun 18, 2024Updated 2 years ago
- 互联网厂商API利用工具。☆568Sep 13, 2024Updated 2 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆606Aug 5, 2026Updated 2 months ago
- Shiro文件上传工具☆99Jun 28, 2023Updated 3 years ago
- fastjson利用，支持tomcat、spring回显，哥斯拉内存马；回显利用链为dhcp、ibatis、c3p0。☆332Mar 15, 2022Updated 4 years ago