☆14Aug 4, 2021Updated 4 years ago
Alternatives and similar repositories for javaweb-vuls
Users that are interested in javaweb-vuls are comparing it to the libraries listed below
Sorting:
- Java library used to upload files following the security steps described by OWASP☆10Jun 7, 2021Updated 4 years ago
- Java安全相关,目前主要是CC链研究☆10Sep 1, 2022Updated 3 years ago
- Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, f…☆13Sep 20, 2021Updated 4 years ago
- 网站监控☆12Nov 9, 2019Updated 6 years ago
- 关于学习java安全的一些知识,正在学习中ing,欢迎fork and star☆14Jul 18, 2022Updated 3 years ago
- 金蝶云星空 erp反序列化命令执行漏洞批量扫描POC&EXP,带命令回显☆33Jul 20, 2023Updated 2 years ago
- ☆20Jan 16, 2024Updated 2 years ago
- ☆22Feb 7, 2024Updated 2 years ago
- ☆17Apr 7, 2022Updated 3 years ago
- CVE-2020-2551 POC to use in Internet☆22May 26, 2020Updated 5 years ago
- 弱口令扫描SDK,可作为CLI单独调用☆37Dec 11, 2025Updated 2 months ago
- 内网配置文件快速收集☆28Jul 25, 2023Updated 2 years ago
- 手把手教你写IAST系列☆24Jan 12, 2024Updated 2 years ago
- 红队自动化打点神器!!! ARL使用代理池联动nuclei,xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated last year
- mpass移动开发框架ios端抓包hook脚本☆41Nov 18, 2020Updated 5 years ago
- ☆58Nov 28, 2023Updated 2 years ago
- common methods that used by my burp extension projects☆52Apr 12, 2024Updated last year
- 帆软bi反序列化漏洞利用工具☆56Jun 4, 2024Updated last year
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆56Sep 6, 2022Updated 3 years ago
- 快速筛选Enscan输出结果中的domain,让你在红蓝攻防中快人一步☆30Aug 13, 2025Updated 6 months ago
- ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统文档☆28May 7, 2024Updated last year
- CLI tool for filtering URLs/IPs with automatically-updated Bug Bounty program scope rules.☆34Dec 31, 2025Updated 2 months ago
- BurpHttpHelper是一款Burpsuite插件,主要用于简化和解决Burpsuite对Http的一些操作.☆107Jan 22, 2023Updated 3 years ago
- woodpecker 漏洞插件开发的简单示范,用于插件的快速上手☆27May 4, 2021Updated 4 years ago
- 多功能 java agent 内存马☆514Oct 8, 2023Updated 2 years ago
- 本项目包含CobaltStrike密码爆破、伪造上线以及DDos功能。其中伪造上线支持常见魔改版CS。This project includes CobaltStrike password blasting, fake online and DDos functions. …☆71Feb 28, 2025Updated last year
- The function of the tool is to inject JNDI through LDAP☆28Dec 21, 2021Updated 4 years ago
- 基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本(动态执行Java/Js代码并获得回显)☆321Dec 22, 2024Updated last year
- 奇安信的网络空间测绘引擎 hunter 的 api 查询导出工具☆76Oct 27, 2021Updated 4 years ago
- Tests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.☆34Apr 12, 2024Updated last year
- 一款用于生成winrar程序RCE(即cve-2023-38831)的POC的工具。☆129Aug 27, 2023Updated 2 years ago
- 用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件☆213Apr 18, 2023Updated 2 years ago
- ☆34Updated this week
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- 泰坦字典生成器-非常全面的密码字典生成器☆79Nov 28, 2023Updated 2 years ago
- SpringFramework 远程代码执行漏洞CVE-2022-22965☆73Apr 1, 2022Updated 3 years ago
- 高性能WEB指纹识别打标工具☆32Feb 4, 2023Updated 3 years ago
- 右键检测图片是否存在Exif漏洞☆31Mar 27, 2023Updated 2 years ago
- Kubernetes has its “ADCS” -- How To Backdoor a Kubernetes in silence and more persistent?☆41Nov 16, 2025Updated 3 months ago