airman604/jdbc-backdoor external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

airman604/jdbc-backdoor

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/airman604/jdbc-backdoor)

Close

airman604 / jdbc-backdoorView on GitHubMore

• External links
• Readme badge

A fake JDBC driver that allows OS command execution.

☆124Oct 2, 2022Updated 4 years ago

Alternatives and similar repositories for jdbc-backdoor

Users that are interested in jdbc-backdoor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• codeplutos / java-security-manager-bypass

  View on GitHub
  ☆154Jun 24, 2019Updated 7 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆208Mar 10, 2019Updated 7 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆254Jul 1, 2016Updated 10 years ago
• QAX-A-Team / ptrace

  View on GitHub
  a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志
  ☆240May 8, 2019Updated 7 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload

  View on GitHub
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Feb 8, 2020Updated 6 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• ThunderGunExpress / Reflective_Schtasks

  View on GitHub
  ☆52Aug 13, 2018Updated 8 years ago
• QAX-A-Team / SerialWriter

  View on GitHub
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆104Feb 28, 2018Updated 8 years ago
• 7dog7 / flash-hijack

  View on GitHub
  flash 劫持轮子，CSRF，劫持，跳转，swf 有需求可以提issues ，src挖掘,劫持response
  ☆86Nov 9, 2019Updated 6 years ago
• exodusintel / CVE-2019-5786

  View on GitHub
  FileReader Exploit
  ☆254Mar 20, 2019Updated 7 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• QAX-A-Team / HideShell

  View on GitHub
  A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.
  ☆219Mar 31, 2019Updated 7 years ago
• l1nk3rlin / CVE-2019-2890

  View on GitHub
  ☆85Dec 6, 2019Updated 6 years ago
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆390Apr 16, 2022Updated 4 years ago
• Ruil1n / after-deserialization-attack

  View on GitHub
  Java After-Deserialization Attack
  ☆79Apr 26, 2021Updated 5 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• tobechenghuai / Shiro_721_Padding_Oracle_RCE

  View on GitHub
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆67Nov 20, 2019Updated 6 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 7 years ago
• 0Kee-Team / JavaProbe

  View on GitHub
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Apr 26, 2021Updated 5 years ago
• wuppp / shiro_rce_exp

  View on GitHub
  Shiro RCE (Padding Oracle Attack)
  ☆149Nov 15, 2019Updated 6 years ago
• QAX-A-Team / redis_lua_exploit

  View on GitHub
  ☆146Jun 20, 2018Updated 8 years ago
• WBGlIl / IIS_backdoor

  View on GitHub
  backdoor
  ☆261Jul 26, 2025Updated last year
• Mel0day / RedTeam-BCS

  View on GitHub
  BCS（北京网络安全大会）2019 红队行动会议重点内容
  ☆819Sep 4, 2019Updated 7 years ago
• TheTwitchy / xxer

  View on GitHub
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆516Jul 29, 2020Updated 6 years ago
• Airboi / CVE-2020-17144-EXP

  View on GitHub
  Exchange2010 authorized RCE
  ☆157Dec 24, 2020Updated 5 years ago
• Deploy open-source AI quickly and easily - Special Bonus Offer • Ad
  Runpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
• Ch1ngg / AggressorScript-UploadAndRunFrp

  View on GitHub
  AggressorScript-UploadAndRunFrp/上传frpc并且运行frpc
  ☆62Sep 1, 2019Updated 7 years ago
• rebeyond / memShell

  View on GitHub
  a webshell resides in the memory of java web server
  ☆704Jun 26, 2018Updated 8 years ago
• T3st0r-Git / hack_postgres

  View on GitHub
  便捷地使用PostgreSQL自定义函数来执行系统命令，适用于数据库管理员知道postgres密码却不知道ssh或RDP密码的时候在服务器执行系统命令。
  ☆55Mar 10, 2020Updated 6 years ago
• Ridter / WebDAV

  View on GitHub
  Set Up WebDAV Server for Remote File Sharing and more
  ☆35Aug 22, 2019Updated 7 years ago
• 5up3rc / weblogic_cmd

  View on GitHub
  weblogic t3 deserialization rce
  ☆268Jul 13, 2017Updated 9 years ago
• quentinhardy / jndiat

  View on GitHub
  JNDI Attacking Tool
  ☆243Jul 11, 2022Updated 4 years ago
• vysecurity / VBA-RunPE

  View on GitHub
  A VBA implementation of the RunPE technique or how to bypass application whitelisting.
  ☆14Dec 30, 2018Updated 7 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆432May 8, 2023Updated 3 years ago
• pyn3rd / CVE-2018-3245

  View on GitHub
  CVE-2018-3245-PoC
  ☆172Jul 13, 2021Updated 5 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• irsl / jackson-rce-via-spel

  View on GitHub
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆121Jan 9, 2018Updated 8 years ago
• petercunha / jenkins-rce

  View on GitHub
  Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!
  ☆296Jun 10, 2019Updated 7 years ago
• 0xFA-Team / CVE-2019-0604

  View on GitHub
  cve-2019-0604 SharePoint RCE exploit
  ☆40Jun 26, 2019Updated 7 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆214May 19, 2020Updated 6 years ago
• Y4er / CVE-2020-2883

  View on GitHub
  Weblogic coherence.jar RCE
  ☆176May 10, 2020Updated 6 years ago
• shengqi158 / fastjson-remote-code-execute-poc

  View on GitHub
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆402Dec 16, 2022Updated 3 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

  View on GitHub
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆104Dec 3, 2018Updated 7 years ago