changheluor007 / JSPKillerView external linksLinks
基于污点分析的JSP Webshell检测工具,模拟JVM的栈帧操作进行数据流分析,可以检测出各种变形的JSP Webshell
☆21Dec 6, 2021Updated 4 years ago
Alternatives and similar repositories for JSPKiller
Users that are interested in JSPKiller are comparing it to the libraries listed below
Sorting:
- Just mindmapping according to official document ( useful for further study )☆28May 20, 2022Updated 3 years ago
- 域渗透脑图中文翻译版☆12Jan 26, 2022Updated 4 years ago
- JAVA指针分析☆13Jul 23, 2019Updated 6 years ago
- 基于神经网络的 PHP webshell检测器,目前有Attention与LSTM两种网络结构,以OPCODE作特征基础☆11Nov 28, 2019Updated 6 years ago
- ☆16Jul 3, 2024Updated last year
- A Online PHP FilterChain Generator.☆17Aug 3, 2024Updated last year
- ☆15Dec 26, 2021Updated 4 years ago
- CVE-2021-43297 POC,Apache Dubbo<= 2.7.13时可以实现RCE☆38Jan 24, 2022Updated 4 years ago
- java代码审计笔记☆19Jun 8, 2024Updated last year
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆55Oct 29, 2022Updated 3 years ago
- 与反病毒软件老大哥们的打闹日常☆13Nov 8, 2018Updated 7 years ago
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated last year
- 自动批量检测java相关组件的rce漏洞,包括weblogic、struts2、shiro☆19Jan 3, 2020Updated 6 years ago
- Analysis Financial Attacker Groups, 金融行业攻击者团伙研究☆23Jun 24, 2021Updated 4 years ago
- Java 代码审计 idea 插件☆26Mar 8, 2025Updated 11 months ago
- 新免杀方向 Mimikatz(猕猴桃) 免杀 360,火绒,电脑管家,WindowsDefinder,详细使用教程请参考博客:https://www.vpss.cc/381.html☆25Mar 4, 2024Updated last year
- 修改nmap的特征流量,过 emergingthreats 的公开ids规则。☆21Aug 14, 2019Updated 6 years ago
- 内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5......☆30Feb 18, 2025Updated 11 months ago
- 记录渗透测试学习中的笔记☆28Oct 22, 2021Updated 4 years ago
- Get sql server connection configuration information☆28Aug 26, 2024Updated last year
- 一种收集敏感信息的Burp插件☆31Sep 2, 2022Updated 3 years ago
- 一个webshell管理工具,支持JSP、PHP,免杀,过WAF,过NIDS。用于学习,研究使用☆28Jul 30, 2021Updated 4 years ago
- 一个基于eBPF/XDP的高性能端口扫描器 A High-Performance Port Scanner Based on eBPF/XDP☆30Aug 29, 2024Updated last year
- The function of the tool is to inject JNDI through LDAP☆28Dec 21, 2021Updated 4 years ago
- 专注于JVM的运行时防御系统RASP☆295Jun 14, 2024Updated last year
- Microsoft Exchange Server SSRF漏洞(CVE-2021-26855)☆36Mar 6, 2021Updated 4 years ago
- CAS 硬编码 远程代码执行漏洞☆125Jun 4, 2021Updated 4 years ago
- awvs script decode 最新最好的解码方法☆38Apr 3, 2020Updated 5 years ago
- confluence CVE-2023-22527 漏洞利用工具,支持冰蝎/哥斯拉内存马注入,支持设置 http 代理☆41Apr 24, 2024Updated last year
- Tomcat的Filter型免杀内存马,主要思路是Bypass各种检查手段☆10Nov 26, 2021Updated 4 years ago
- Automated PoC of CVE-2021-44521☆10Feb 24, 2022Updated 3 years ago
- ATL.dll and WmiMgmt.msc UAC Bypass☆12Apr 26, 2025Updated 9 months ago
- Making a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4☆12Apr 11, 2024Updated last year
- SUNBURST DGA decoder☆11Dec 23, 2020Updated 5 years ago
- 基于Java ASM技术和GadgetInspector的原理,尝试实现一个自动Java代码审计工具。 目前做到了可控参数分析和数据流跟踪分析☆39Oct 26, 2021Updated 4 years ago
- JavaSec☆43Mar 18, 2024Updated last year
- 内存加载FRP☆10Sep 11, 2023Updated 2 years ago
- 使用CodeBERT来webshell classfication☆37Sep 18, 2025Updated 4 months ago
- A tiny runtime hot patch tool for JAVA☆14Dec 22, 2024Updated last year