Alternatives and similar repositories for CNVD-2020-10487-Tomcat-Ajp-lfi

Users that are interested in CNVD-2020-10487-Tomcat-Ajp-lfi are comparing it to the libraries listed below

• Ridter / redis-rce
  Redis 4.x/5.x RCE
  ☆965Updated 3 years ago
• lijiejie / IIS_shortname_Scanner
  an IIS shortname Scanner
  ☆564Updated 2 years ago
• allyshka / Rogue-MySql-Server
  MySQL fake server for read files of connected clients
  ☆598Updated 8 years ago
• dr0op / WeblogicScan
  增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持
  ☆965Updated last year
• n0b0dyCN / redis-rogue-server
  Redis(<=5.0.5) RCE
  ☆1,090Updated last year
• c0ny1 / xxe-lab
  一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo
  ☆800Updated 2 years ago
• TheKingOfDuck / easyXssPayload
  XssPayload List . Usage:
  ☆731Updated 5 years ago
• Dliv3 / redis-rogue-server
  Redis 4.x/5.x RCE
  ☆554Updated 4 years ago
• threedr3am / JSP-WebShells
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,397Updated 3 years ago
• lilifengcode / Burpsuite-Plugins-Usage
  Burpsuite-Plugins-Usage
  ☆517Updated 5 years ago
• artsploit / yaml-payload
  A tiny project for generating SnakeYAML deserialization payloads
  ☆611Updated 2 weeks ago
• 1120362990 / vulnerability-list
  在渗透测试中快速检测常见中间件、组件的高危漏洞。
  ☆732Updated 3 years ago
• wh1t3p1g / ysomap
  A helpful Java Deserialization exploit framework.
  ☆1,228Updated 7 months ago
• yangyangwithgnu / bypass_disablefunc_via_LD_PRELOAD
  bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
  ☆1,160Updated 4 years ago
• FunnyWolf / pystinger
  Bypass firewall for traffic forwarding using webshell
  ☆1,423Updated 3 years ago
• fnmsd / MySQL_Fake_Server
  MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize
  ☆1,340Updated 3 years ago
• feihong-cs / Java-Rce-Echo
  Java RCE 回显测试代码
  ☆1,016Updated 4 years ago
• l3m0n / Bypass_Disable_functions_Shell
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,198Updated last year
• hypn0s / AJPy
  ☆473Updated 2 years ago
• gobysec / GobyVuls
  Vulnerabilities of Goby supported with exploitation.
  ☆734Updated 2 months ago
• rebeyond / memShell
  a webshell resides in the memory of java web server
  ☆684Updated 7 years ago
• boy-hack / wooyun-payload
  从wooyun中提取的payload，以及burp插件
  ☆842Updated 3 years ago
• admintony / svnExploit
  SvnExploit支持SVN源代码泄露全版本Dump源码
  ☆1,003Updated 2 years ago
• c0ny1 / FastjsonExploit
  Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
  ☆1,356Updated 2 years ago
• Ares-X / shiro-exploit
  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
  ☆894Updated 4 years ago
• bit4woo / reCAPTCHA
  reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
  ☆810Updated last year
• vulhub / redis-rogue-getshell
  redis 4.x/5.x master/slave getshell module
  ☆372Updated 5 years ago
• insightglacier / Shiro_exploit
  Apache Shiro 反序列化漏洞检测与利用工具
  ☆562Updated 5 years ago
• sv3nbeast / ShiroScan
  Shiro<=1.2.4反序列化，一键检测工具
  ☆988Updated 4 years ago
• TideSec / Decrypt_Weblogic_Password
  搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。
  ☆831Updated last year