******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python…
☆107Oct 22, 2017Updated 9 years ago
Alternatives and similar repositories for burplugin-java-rce
Users that are interested in burplugin-java-rce are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- burpplugin 根据一遍神贴,实现了一下burp插件版本的小刀,一键生成shell☆14Jul 15, 2019Updated 7 years ago
- autoType enable☆37Sep 21, 2019Updated 7 years ago
- More Easier Burp Extension To Solve Javascript Front End Encryption,一款更易使用的解决前端加密问题的Burp插件。☆47Apr 15, 2020Updated 6 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞, 对功能进行强化以及脚本进行分类添加,自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆355Mar 12, 2020Updated 6 years ago
- web模糊测试 - 将漏洞可能性放大☆143Apr 23, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 反弹shell生成器☆17Jul 23, 2018Updated 8 years ago
- A BurpSuite extension written by Python,used to find API interface in JS file.☆115Apr 28, 2026Updated 6 months ago
- 一款高效的参数fuzz工具|A faster param fuzzing test tool☆104Nov 8, 2020Updated 5 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618,CVE-2019-2729检测,Python3支持☆963Jun 16, 2024Updated 2 years ago
- 资产扫描工具☆45Sep 1, 2020Updated 6 years ago
- 解密好的AWVS10.5 data/script/目录下的脚本☆265Nov 11, 2017Updated 8 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆725Mar 21, 2022Updated 4 years ago
- 对公网IP列表进行端口服务扫描,发现周期内的端口服务变化情况和弱口令安全风险☆608Apr 12, 2021Updated 5 years ago
- Python2编写的struts2漏洞全版本检测和利用工具☆1,410May 7, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 通过BurpSuite来构建自己的爆破字典,可以通过字典爆破来发现隐藏资产。☆499Jan 30, 2024Updated 2 years ago
- 通用的指纹识别规则☆371Dec 2, 2022Updated 3 years ago
- fuck☆25Feb 18, 2016Updated 10 years ago
- 可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified☆560Apr 20, 2024Updated 2 years ago
- 前渗透信息探测工具集-URL采集☆164May 6, 2018Updated 8 years ago
- Redis RCE 的几种方法☆90Jun 5, 2024Updated 2 years ago
- Apache Shiro Java Analysis and Utilization of Deserialization Vulnerabilities☆41Jun 28, 2020Updated 6 years ago
- Reference:https://www.w2n1ck.com/article/44/☆156Mar 7, 2020Updated 6 years ago
- Burpsuite HTTP 插件,主要用于内网测试,可定制Content-Type和Response Content☆24Jul 2, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 免杀webshell无限生成工具☆1,277Apr 3, 2020Updated 6 years ago
- Shiro<=1.2.4反序列化,一键检测工具☆978Mar 4, 2021Updated 5 years ago
- Website Sensitive Personal Information Hunter 网站个人敏感信息文件扫描器☆214Jul 9, 2022Updated 4 years ago
- 基于亚马逊S3\阿里云OSS\腾讯COS通信隧道的远程管理工具☆329Oct 10, 2020Updated 6 years ago
- 资产探测工具,检测存活,检测风险端口,常规端口,全端口探测等等,对探测的端口的脆弱面进行安全分析进行☆437May 22, 2023Updated 3 years ago
- Shiro反序列化回显利用、内存shell、检查 Burp插件☆214Sep 1, 2022Updated 4 years ago
- 📧Coremail邮件系统组织通讯录导出脚本☆156Sep 28, 2021Updated 5 years ago
- JRE8u20_RCE_Gadget☆254Jul 1, 2016Updated 10 years ago
- 绕过专业工具检测的Webshell研究文章和免杀的Webshell☆1,738Nov 15, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测☆563Dec 1, 2017Updated 8 years ago
- 修改的SweetPotato,使之可以用于CobaltStrike v4.0☆244Apr 30, 2020Updated 6 years ago
- WeblogicScanLot系列,Weblogic漏洞批量检测工具,V2.2☆181Aug 1, 2020Updated 6 years ago
- weblogic wls9-async 反序列利用图形版客户端 CNVD-C-2019-48814☆13May 9, 2019Updated 7 years ago
- 一个可以查看文件传输进度的Web项目☆19Jul 22, 2021Updated 5 years ago
- flash 劫持轮子,CSRF,劫持,跳转,swf 有需求可以提issues ,src挖掘,劫持response☆86Nov 9, 2019Updated 6 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆169Apr 5, 2019Updated 7 years ago