Apache-Log4j漏洞复现笔记
☆115Feb 17, 2022Updated 4 years ago
Alternatives and similar repositories for Apache-Log4j-Learning
Users that are interested in Apache-Log4j-Learning are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一款用于 JNDI注入 利用的工具,大量参考/引用了 Rogue JNDI 项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。(from https://github.com/feihong-cs/JNDIE…☆352Aug 8, 2025Updated last year
- Log4j2 RCE Passive Scanner plugin for BurpSuite☆834Aug 4, 2023Updated 3 years ago
- TongdaOA 11.7 ~11.8 通达OA,任意用户登录+后台getshell☆86Jul 16, 2021Updated 5 years ago
- 一款辅助安全研发在日常工作中渗透测试、安全研究、安全开发等工作的工具! 程序支持Yaml格式的http请求模版☆57Oct 4, 2022Updated 4 years ago
- 将Goby的json格式Poc转为xray的yaml格式Poc☆131Nov 19, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)☆2,834Mar 22, 2023Updated 3 years ago
- HeapDump敏感信息提取工具☆1,701Aug 20, 2026Updated 2 months ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,270Jan 30, 2022Updated 4 years ago
- SpringBoot Actuator未授权自动化利用,支持信息泄漏/RCE☆231Dec 5, 2020Updated 5 years ago
- 冰蝎 哥斯拉 WebShell bypass☆770Jan 15, 2026Updated 9 months ago
- log4j tomcat web漏洞环境☆11Dec 10, 2021Updated 4 years ago
- goby poc or exp,分享goby最新网络安全漏洞检测或利用代码☆625Jan 11, 2022Updated 4 years ago
- 高危漏洞精准检测与深度利用框架☆1,462Jan 8, 2023Updated 3 years ago
- WEB批量请求器(WebBatchRequest)是对目标地址批量进行快速的存活探测、Title获取,简单的banner识别,支持HTTP代理以及可自定义HTTP请求用于批量的漏洞验证等的一款基于JAVA编写的轻量工具。☆367Jul 20, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 一个简单的Fastjson反序列化检测burp插件☆980Jun 18, 2021Updated 5 years ago
- tp3注入总结☆19Jan 6, 2022Updated 4 years ago
- 被动收集资产并自动进行SQL注入检测(插件化 自动Bypass)、XSS检测、RCE检测、敏感信息检测☆196Nov 29, 2023Updated 2 years ago
- 一款基于BurpSuite的被动式shiro检测插件☆1,807Dec 14, 2022Updated 3 years ago
- burpsuite 的Spring漏洞扫描插件。SpringVulScan:支持检测:路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977☆153Jan 23, 2023Updated 3 years ago
- 一个全新的敏感文件发现工具☆270Jan 5, 2021Updated 5 years ago
- 利用xray高级版批量收集子域名☆16Feb 19, 2020Updated 6 years ago
- shiro综合利用工具☆654Apr 15, 2023Updated 3 years ago
- 一个开源的、开箱即用的漏洞批量验证框架☆917Oct 24, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er☆27Mar 3, 2022Updated 4 years ago
- Banli-高危资产识别和高危漏洞扫描☆455Apr 10, 2023Updated 3 years ago
- Fiora:漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行,也可作为burp插件使用。☆1,279Apr 10, 2026Updated 6 months ago
- ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具,目前测试免杀360&火绒&电脑管家&Windows Defender(其他杀软未测试)。☆415Sep 20, 2022Updated 4 years ago
- python写的一款免杀工具(shellcode加载器)BypassAV,国内杀软全过(windows denfend)2021-9-13☆289Oct 28, 2024Updated 2 years ago
- Weblogic一键漏洞检测工具,V1.5,更新时间:20200730☆2,261May 22, 2023Updated 3 years ago
- 各类域名数据处理☆13Jul 24, 2024Updated 2 years ago
- bypass AV生成工具,目前免杀效果不是很好了,但是过个360,火绒啥的没问题☆105Nov 7, 2021Updated 4 years ago
- 项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,890Jan 15, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Struts2全漏洞扫描利用工具☆2,215Jul 12, 2021Updated 5 years ago
- 泛微oa漏洞利用工具☆259Jan 4, 2023Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用☆855Jul 7, 2023Updated 3 years ago
- DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具,自带WEB界面 / DNSLog-GO is a monitoring tool written in Golang that monitors DNS resolution records. It …☆1,310Oct 16, 2026Updated 2 weeks ago
- 各大漏洞文库合集☆755Oct 5, 2021Updated 5 years ago
- CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks☆841Jun 13, 2023Updated 3 years ago
- 破产版免杀☆51Oct 2, 2021Updated 5 years ago