Apache-Log4j漏洞复现笔记
☆116Feb 17, 2022Updated 4 years ago
Alternatives and similar repositories for Apache-Log4j-Learning
Users that are interested in Apache-Log4j-Learning are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一款用于 JNDI注入 利用的工具,大量参考/引用了 Rogue JNDI 项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。(from https://github.com/feihong-cs/JNDIE…☆346Aug 8, 2025Updated 8 months ago
- Log4j2 RCE Passive Scanner plugin for BurpSuite☆831Aug 4, 2023Updated 2 years ago
- TongdaOA 11.7 ~11.8 通达OA,任意用户登录+后台getshell☆86Jul 16, 2021Updated 4 years ago
- JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)☆2,800Mar 22, 2023Updated 3 years ago
- 将Goby的json格式Poc转为xray的yaml格式Poc☆132Nov 19, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- log4j tomcat web漏洞环境☆11Dec 10, 2021Updated 4 years ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,266Jan 30, 2022Updated 4 years ago
- HeapDump敏感信息提取工具☆1,647Dec 15, 2025Updated 3 months ago
- 冰蝎 哥斯拉 WebShell bypass☆765Jan 15, 2026Updated 2 months ago
- 一款辅助安全研发在日常工作中渗透测试、安全研究、安全开发等工作的工具! 程序支持Yaml格式的http请求模版☆56Oct 4, 2022Updated 3 years ago
- goby poc or exp,分享goby最新网络安全漏洞检测或利用代码☆632Jan 11, 2022Updated 4 years ago
- Log4j 多线程批量检测利用工具☆212Dec 14, 2021Updated 4 years ago
- 高危漏洞精准检测与深度利用框架☆1,459Jan 8, 2023Updated 3 years ago
- 一个简单的Fastjson反序列化检测burp插件☆973Jun 18, 2021Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- burpsuite 的Spring漏洞扫描插件。SpringVulScan:支持检测:路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977☆154Jan 23, 2023Updated 3 years ago
- Vulcan2.0|分布式扫描器|漏洞扫描|指纹识别☆75Oct 27, 2021Updated 4 years ago
- 一款基于BurpSuite的被动式shiro检测插件☆1,798Dec 14, 2022Updated 3 years ago
- WEB批量请求器(WebBatchRequest)是对目标地址批量进行快速的存活探测、Title获取,简单的banner识别,支持HTTP代理以及可自定义HTTP请求用于批量的漏洞验证等的一款基于JAVA编写的轻量工具。☆362Jul 20, 2022Updated 3 years ago
- domain_hunter的高级版本,SRC挖洞、HW打点之必备!自动化资产收集;快速Title获取;外部工具联动;等等☆2,121Apr 1, 2026Updated last week
- 各类域名数据处理☆13Jul 24, 2024Updated last year
- SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er☆29Mar 3, 2022Updated 4 years ago
- Banli-高危资产识 别和高危漏洞扫描☆457Apr 10, 2023Updated 3 years ago
- 一个开源的、开箱即用的漏洞批量验证框架☆906Oct 24, 2025Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Weblogic一键漏洞检测工具,V1.5,更新时间:20200730☆2,269May 22, 2023Updated 2 years ago
- 各大漏洞文库合集☆759Oct 5, 2021Updated 4 years ago
- SpringBoot Actuator未授权自动化利用,支持信息泄漏/RCE☆231Dec 5, 2020Updated 5 years ago
- shiro综合利用工具☆650Apr 15, 2023Updated 2 years ago
- DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具,自带WEB界面 / DNSLog-GO is a monitoring tool written in Golang that monitors DNS resolution records. It …☆1,284Jan 21, 2026Updated 2 months ago
- 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN…☆3,524Dec 18, 2022Updated 3 years ago
- CVE-2021-43798 Grafana 任意文件读取漏洞 POC+参数☆14Dec 17, 2021Updated 4 years ago
- Windows提权辅助工具☆24Aug 2, 2020Updated 5 years ago
- Burp suite 分块传输辅助插件☆2,031Feb 23, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- 红队作战中比较常遇到的一些重点系统漏洞整理。☆2,521Jul 17, 2021Updated 4 years ago
- shiro rememberMe 在线加解密工具☆54Mar 25, 2024Updated 2 years ago
- 一款OutLook信息收集工具☆244May 23, 2023Updated 2 years ago
- Some payloads of JNDI Injection in JDK 1.8.0_191+☆485Dec 9, 2020Updated 5 years ago
- 一款基于BurpSuite的被动式FastJson检测插件☆1,242Oct 1, 2022Updated 3 years ago
- 被动收集资产并自动进行SQL注入检测(插件化 自动Bypass)、XSS检测、RCE检测、敏感 信息检测☆201Nov 29, 2023Updated 2 years ago
- 一个全新的敏感文件发现工具☆271Jan 5, 2021Updated 5 years ago