bigsizeme / JEECMS-INJECTView external linksLinks
JEECMS FreeMarker-RCE
☆12Nov 12, 2021Updated 4 years ago
Alternatives and similar repositories for JEECMS-INJECT
Users that are interested in JEECMS-INJECT are comparing it to the libraries listed below
Sorting:
- ☆21Jun 13, 2022Updated 3 years ago
- Code By:Tas9er / ThinkCMF漏洞安全测试☆13Jan 15, 2021Updated 5 years ago
- A AWD Backup of Bugku.☆12Apr 3, 2022Updated 3 years ago
- SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE☆47Oct 23, 2021Updated 4 years ago
- PHP文件上传50+绕过手法全景解析☆17Mar 16, 2025Updated 10 months ago
- 转换python代码结构到golang的小工具☆19Aug 29, 2017Updated 8 years ago
- 一款不需要买代理来减少扫网站目录被封概率的扫描器,适用于中小规格字典。☆19Aug 23, 2021Updated 4 years ago
- slides and papers from (or partly from) Bonan☆22Mar 8, 2024Updated last year
- Java静态代码安全审计工具,使用JavaParser项目做语法分析,计划支持常见的Web漏洞与组件漏洞☆21Sep 20, 2021Updated 4 years ago
- 若依4.8.0后台RCE☆26May 21, 2025Updated 8 months ago
- ☆26Aug 26, 2021Updated 4 years ago
- ☆28Dec 2, 2021Updated 4 years ago
- Apache Druid 任意文件读取☆33Oct 15, 2021Updated 4 years ago
- 记录调试分析ysoserial系列的学习过程,主要包含手动构造的一些poc,便于加深对漏洞和工具的理解☆30Jun 15, 2020Updated 5 years ago
- 一个LDAP请求监听器,摆脱dnslog平台和java☆34Feb 4, 2023Updated 3 years ago
- 规则组合子域名字典生成☆30Mar 5, 2020Updated 5 years ago
- 在JustTrustMe的基础上修改了log日志打印位置,便于追踪hook函数☆30Jul 15, 2019Updated 6 years ago
- frp0.38.1 支持域前置、远程加载配置文件、配置文件自删除、流量特征修改☆133Apr 26, 2022Updated 3 years ago
- ☆37Dec 26, 2021Updated 4 years ago
- ☆37Sep 28, 2021Updated 4 years ago
- CVE-2022-33980 Apache Commons Configuration 远程命令执行漏洞☆44Jul 8, 2022Updated 3 years ago
- 通达OA系列检测EXP☆35Nov 23, 2021Updated 4 years ago
- System level encryption algorithm Hook from Frida☆37May 31, 2020Updated 5 years ago
- CVE-2021-43297 POC,Apache Dubbo<= 2.7.13时可以实现RCE☆38Jan 24, 2022Updated 4 years ago
- Android 隐私政策合规检查方案☆39Sep 1, 2022Updated 3 years ago
- A tiny runtime hot patch tool for JAVA☆14Dec 22, 2024Updated last year
- 通过网络资产线索(如:域名,IP地址,资产名称等),利用FOFA访问网络空间测绘数据☆11Apr 23, 2024Updated last year
- 实现轻量级RPC框架,网络通信框架Netty、 注册中心(Zookeeper、Nacos)、Java基础(注解、反射、多线程、Future、SPI 、动态代理)、自定义传输协议、多种序列化(ProtoBuf / Kyro / Hessian)、Gzip压缩、轮询、随机、一致性…☆14May 7, 2022Updated 3 years ago
- 攻击Java Web应用-[Java Web安全]☆12Dec 10, 2019Updated 6 years ago
- ETL management platform based on Kettle☆11Jan 3, 2019Updated 7 years ago
- log4j2-vaccine☆84Dec 11, 2021Updated 4 years ago
- 基于Java ASM技术和GadgetInspector的原理,尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析☆39Oct 26, 2021Updated 4 years ago
- CVE-2022-26135☆11Jul 12, 2022Updated 3 years ago
- ☆46Dec 5, 2023Updated 2 years ago
- fastjson不出网利用、c3p0☆255Jul 30, 2021Updated 4 years ago
- ExploitDB toolkit ExploitDB辅助工具☆11Jul 27, 2021Updated 4 years ago
- A small PoC using DInvoke, dynamically mapping a DLL and executing Win32 APIs for process injection.☆10Dec 16, 2021Updated 4 years ago
- 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)☆11Sep 30, 2016Updated 9 years ago
- ☆13Apr 8, 2022Updated 3 years ago