bkfish / Awesome_shiroView external linksLinks
CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行,反弹shell的脚本
☆55Jun 27, 2020Updated 5 years ago
Alternatives and similar repositories for Awesome_shiro
Users that are interested in Awesome_shiro are comparing it to the libraries listed below
Sorting:
- an exploit tool for Thinkcmf RCE vulnerable☆14Feb 5, 2020Updated 6 years ago
- TongdaOA 11.7 ~11.8 通达OA,任意用户登录+后台getshell☆86Jul 16, 2021Updated 4 years ago
- 利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。☆123Jul 27, 2020Updated 5 years ago
- shiro <= 1.2.4 反序列化远程命令执行利用脚本☆52Jun 21, 2021Updated 4 years ago
- Yonyou-UNSERIALIZE,用友NC 反序列化检查工具,批量检测用友NC 反序列化☆50Jul 21, 2023Updated 2 years ago
- 破产版免杀☆52Oct 2, 2021Updated 4 years ago
- 使用shiro无CC依赖的CB1直接写入冰蝎马 支持tomcat、spring☆35Mar 11, 2023Updated 2 years ago
- 👻inject_und3ad -- 蚁剑(AntSword)插件☆24Aug 8, 2019Updated 6 years ago
- seeyonAjaxGetshell,致远OA ajax.jsp未授权文件上传漏洞,java版POC,自定义shell☆20Jan 14, 2021Updated 5 years ago
- Tomcat基于动态注册Filter的无文件Webshell☆26Jun 20, 2020Updated 5 years ago
- ☆22Sep 26, 2017Updated 8 years ago
- SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er☆30Mar 3, 2022Updated 3 years ago
- BurpSuite 插件,自动格式化 response 中的 json/jsonp 数据,同时也会对 Unicode 进行解码☆10Feb 19, 2020Updated 5 years ago
- Nexus Repository Manager3 - 远程执行代码漏洞回显payload☆13Sep 29, 2020Updated 5 years ago
- The burp extension to forward the request☆10Oct 21, 2024Updated last year
- SMS4 Decrypt☆11Dec 23, 2020Updated 5 years ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆450Jun 14, 2022Updated 3 years ago
- 整理收集Struts2漏洞环境☆270Jan 9, 2018Updated 8 years ago
- Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)☆875Dec 16, 2022Updated 3 years ago
- Shiro反序列化利用工具,支持新版本(AES-GCM)Shiro的key爆破,配合ysoserial,生成回显Payload☆898May 28, 2021Updated 4 years ago
- 用于渗透测试、安全运维的插件化并发框架,自写插件可进行-PoC测试、子域发现、端口扫描等。☆14Feb 9, 2021Updated 5 years ago
- Yapi RCE漏洞批量验证与伪交互SHELL☆42Jul 9, 2021Updated 4 years ago
- 利用api来查询用户的star,仓库的commits、releases、issus。查询关键字更新☆12Mar 7, 2021Updated 4 years ago
- cloudsafe 云安全扫描☆23Dec 30, 2013Updated 12 years ago
- shiro反序列化批量ip快速检测脚本☆77Jul 23, 2020Updated 5 years ago
- 海康威视/萤石云密钥泄露利用工具☆36Oct 9, 2023Updated 2 years ago
- 个人使用的一款Web CMS指纹扫描器☆25Aug 4, 2020Updated 5 years ago
- Apache Shiro 反序列化漏洞检测与利用工具,一键注入内存马☆138Jan 20, 2021Updated 5 years ago
- 常用漏洞一键化自动扫描,解决平时渗透测试中的重复工作~☆101Dec 2, 2019Updated 6 years ago
- 一个flask的web界面扫描,主要是仿照网上的一位前辈的代码;有cms识别,cms漏洞检测,子域名扫描等☆12Feb 7, 2019Updated 7 years ago
- Take a list of IP addresses and probe for working HTTP and HTTPS servers☆12Mar 12, 2020Updated 5 years ago
- Apache Shiro payload AES解密☆28Mar 11, 2021Updated 4 years ago
- Golang:采用随机deskey和hex进行文件加密,常用于加密shellcode.☆14May 16, 2021Updated 4 years ago
- 基于radium爬虫编写的批量任务处理脚本,使用进程池☆13Aug 20, 2020Updated 5 years ago
- 一款快速修改HTTP数据包头的Burp Suite插件☆254Oct 10, 2018Updated 7 years ago
- Shiro550/Shiro721 一键化利用工具,支持多种回显方式☆1,949Jun 4, 2021Updated 4 years ago
- Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测☆521May 21, 2020Updated 5 years ago
- 新版将不再对外公开发布。天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端,支持跨平台运行,目前基于JDK1.8开发,运行必须安装JDK或JRE 1.8,注意不能是open jdk,只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebSh…☆387Mar 22, 2021Updated 4 years ago
- This is a js front-end encryption blasting account and password tools,Because it calls JS in a clever way without us having to analyze th…☆77Dec 13, 2020Updated 5 years ago