cream-sec / JSPHorse
结合反射调用、动态编译、BCEL、defineClass0，ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具
☆18Updated 2 years ago
Related projects: ⓘ
- 蓝凌OA漏洞利用工具/前台无条件RCE/文件写入☆20Updated 3 years ago
- Burp-Plugin-study☆16Updated 3 years ago
- 火刃 - 轻量级的，多功能的，联合xray、物联网引擎的全自动广域队列扫描器☆28Updated 2 years ago
- ☆11Updated this week
- 一个垃圾的fastjson反序列化payload生成工具☆18Updated 2 years ago
- 一个解密 Shiro-rememberMe的图形化小工具，支持cbc和gcm。☆27Updated 3 years ago
- ☆41Updated this week
- ☆10Updated this week
- ☆12Updated 3 years ago
- Bloodhound 数据解析工具☆20Updated last year
- ☆15Updated this week
- 一款辅助探测Orderby注入漏洞的BurpSuite插件☆24Updated 2 years ago
- Windows & linux Echo to file command converter☆22Updated 3 years ago
- 去除了流量特征的UDP协议跨平台机器管理工具☆36Updated 3 years ago
- payloads☆15Updated 3 years ago
- 重点系统指纹识别的工具☆32Updated 2 years ago
- 记录weblogic的一些漏洞原理☆17Updated 2 years ago
- Windows NTLMSSP library☆11Updated 3 years ago
- Python3 script to quickly get various information from a domain controller through his LDAP service.☆14Updated 2 years ago
- ☆20Updated this week
- zip slip☆36Updated last year
- CVE-2022-24990信息泄露+RCE 一条龙☆39Updated 2 years ago
- 一个提供查询 TXT 记录的 DNS 服务利用工具。例如：可配合 Windows 下的 certutil 工具传输小文件（64KB）☆34Updated 2 years ago
- ☆47Updated this week
- 一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。☆11Updated 2 years ago
- ☆21Updated 2 years ago
- c/s网络准入平台☆20Updated last year
- ☆27Updated this week
- ☆36Updated this week