Alternatives and similar repositories for shiro-check

Users that are interested in shiro-check are comparing it to the libraries listed below

• Ares-X / shiro-exploit

  View on GitHub
  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
  ☆898May 28, 2021Updated 4 years ago
• fupinglee / ShiroScan

  View on GitHub
  Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)
  ☆875Dec 16, 2022Updated 3 years ago
• AlphabugX / csOnvps

  View on GitHub
  CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计
  ☆286Mar 19, 2022Updated 3 years ago
• zilong3033 / fastjsonScan

  View on GitHub
  fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。
  ☆124May 14, 2021Updated 4 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆770Jan 26, 2022Updated 4 years ago
• pmiaowu / BurpShiroPassiveScan

  View on GitHub
  一款基于BurpSuite的被动式shiro检测插件
  ☆1,790Dec 14, 2022Updated 3 years ago
• xfiftyone / STS2G

  View on GitHub
  Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang
  ☆573Jan 10, 2022Updated 4 years ago
• potats0 / shiroPoc

  View on GitHub
  ☆318Jun 4, 2021Updated 4 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆535Aug 25, 2020Updated 5 years ago
• Rvn0xsy / PassDecode-jar

  View on GitHub
  帆软/致远密码解密工具
  ☆359Jul 29, 2021Updated 4 years ago
• depycode / fastjson-c3p0

  View on GitHub
  fastjson不出网利用、c3p0
  ☆255Jul 30, 2021Updated 4 years ago
• Maskhe / FastjsonScan

  View on GitHub
  一个简单的Fastjson反序列化检测burp插件
  ☆969Jun 18, 2021Updated 4 years ago
• uknowsec / frpModify

  View on GitHub
  修改frp支持域前置与配置文件自删除
  ☆397Dec 31, 2020Updated 5 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,010May 21, 2024Updated last year
• SPuerBRead / Bridge

  View on GitHub
  无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。
  ☆402Dec 21, 2025Updated last month
• Jumbo-WJB / burp_find_shiro

  View on GitHub
  通过burp代理流量寻找shiro站点
  ☆60Jun 11, 2020Updated 5 years ago
• sv3nbeast / ShiroScan

  View on GitHub
  Shiro<=1.2.4反序列化，一键检测工具
  ☆989Mar 4, 2021Updated 4 years ago
• sukabuliet / ThinkphpRCE

  View on GitHub
  Thinkphp rce扫描脚本，附带日志扫描
  ☆241Jun 19, 2020Updated 5 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,404Jan 18, 2022Updated 4 years ago
• yzddmr6 / As-Exploits

  View on GitHub
  中国蚁剑后渗透框架
  ☆940Jan 18, 2024Updated 2 years ago
• wyzxxz / shiro_rce_tool

  View on GitHub
  shiro 反序列 命令执行辅助检测工具
  ☆1,558May 21, 2024Updated last year
• shack2 / Struts2VulsTools

  View on GitHub
  Struts2系列漏洞检查工具
  ☆435Sep 27, 2019Updated 6 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• pmiaowu / BurpFastJsonScan

  View on GitHub
  一款基于BurpSuite的被动式FastJson检测插件
  ☆1,237Oct 1, 2022Updated 3 years ago
• DeEpinGh0st / Erebus

  View on GitHub
  CobaltStrike后渗透测试插件
  ☆1,554Oct 28, 2021Updated 4 years ago
• r00tSe7en / JNDIMonitor

  View on GitHub
  一个LDAP请求监听器，摆脱dnslog平台
  ☆294Apr 7, 2023Updated 2 years ago
• Richard-Tang / x1DecoderPlus

  View on GitHub
  AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell
  ☆163Sep 28, 2021Updated 4 years ago
• xinyu2428 / TDOA_RCE

  View on GitHub
  通达OA综合利用工具
  ☆516Mar 17, 2021Updated 4 years ago
• shack2 / skyscorpion

  View on GitHub
  新版将不再对外公开发布。天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端，支持跨平台运行，目前基于JDK1.8开发，运行必须安装JDK或JRE 1.8，注意不能是open jdk，只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebSh…
  ☆387Mar 22, 2021Updated 4 years ago
• NS-Sp4ce / TongDaOA-Fake-User

  View on GitHub
  通达OA 任意用户登录漏洞
  ☆360Aug 27, 2020Updated 5 years ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆451Jun 19, 2024Updated last year
• FunnyWolf / pystinger

  View on GitHub
  Bypass firewall for traffic forwarding using webshell
  ☆1,432Sep 29, 2021Updated 4 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,015Oct 15, 2020Updated 5 years ago
• BeichenDream / MysqlT

  View on GitHub
  伪造Myslq服务端,并利用Mysql逻辑漏洞来获取客户端的任意文件反击攻击者
  ☆363Apr 24, 2022Updated 3 years ago
• AlphabugX / Alphalog

  View on GitHub
  DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red)，Alphalog与传统DNSLog不同，更快、更安全。
  ☆456Aug 20, 2025Updated 5 months ago
• cbwang505 / CVE-2019-0708-EXP-Windows

  View on GitHub
  CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell
  ☆321Jan 21, 2020Updated 6 years ago
• z1un / Z1-AggressorScripts

  View on GitHub
  适用于Cobalt Strike的插件
  ☆563May 30, 2021Updated 4 years ago
• LandGrey / ClassHound

  View on GitHub
  利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码
  ☆711May 10, 2021Updated 4 years ago
• QAX-A-Team / sharpwmi

  View on GitHub
  sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆717Aug 3, 2021Updated 4 years ago