Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul
☆95Oct 30, 2023Updated 2 years ago
Alternatives and similar repositories for fastjson_study
Users that are interested in fastjson_study are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Java CVE Vulnerability Environment☆44Jun 11, 2024Updated 2 years ago
- burp手工检测fastjson辅助☆88Mar 4, 2024Updated 2 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆551Mar 6, 2025Updated last year
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆15Jul 7, 2024Updated 2 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆465Jan 12, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆132Oct 12, 2024Updated last year
- Godzilla插件|内存马|Suo5内存代理｜jmg for Godzilla☆245Jun 6, 2024Updated 2 years ago
- A Go library for generating Java deserialization payloads.☆152Sep 9, 2024Updated last year
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆576Apr 3, 2026Updated 4 months ago
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序 列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,244Jul 12, 2024Updated 2 years ago
- MySQL_Fake_Server-啄木鸟yso适配版☆45Sep 20, 2024Updated last year
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆289Nov 20, 2023Updated 2 years ago
- JndiBypass漏洞利用，可动态生成类，防止类注入冲突☆28Aug 16, 2023Updated 2 years ago
- javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手☆278Jun 18, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一款针对Shiro550漏洞进行快速漏洞利用工具。 对 @SummerSec 大佬的项目https://github.com/SummerSec/ShiroAttack2 进行了一些改进。☆251May 29, 2023Updated 3 years ago
- 收集内存马打入方式☆508May 20, 2022Updated 4 years ago
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆28Sep 28, 2025Updated 10 months ago
- 一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆867Aug 30, 2023Updated 2 years ago
- 支持注入内存马和Bypass WAF☆29Dec 12, 2023Updated 2 years ago
- ☆525Sep 16, 2022Updated 3 years ago
- 一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理☆294Aug 8, 2023Updated 3 years ago
- xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作，上传，job等相应操作。☆195Nov 25, 2023Updated 2 years ago
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆229Jun 8, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆249Apr 15, 2026Updated 3 months ago
- fastjson 80 远程代码执行漏洞复现☆197Sep 7, 2022Updated 3 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆607Updated this week
- 互联网厂商API利用工具。☆571Sep 13, 2024Updated last year
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆126Jul 30, 2026Updated last week
- Fastjson姿势技巧集合☆1,860Oct 20, 2023Updated 2 years ago
- CVE-2022-22947注入哥斯拉内存马☆28Jun 21, 2023Updated 3 years ago
- 泛微oa漏洞利用工具☆258Jan 4, 2023Updated 3 years ago
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆879Jun 24, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 本工具为jeecg框架漏洞利用工具非jeecg-boot！☆184Aug 13, 2024Updated last year
- 一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.☆2,228Aug 21, 2025Updated 11 months ago
- Java内存马注入工具☆252Apr 8, 2023Updated 3 years ago
- 一款dump hash工具配合后渗透的利用☆277Apr 21, 2023Updated 3 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆256Jul 12, 2023Updated 3 years ago
- Mssql利用工具☆279Aug 7, 2023Updated 3 years ago
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆237Jun 5, 2026Updated 2 months ago