支持常见中间件无文件落地冰蝎内存马注入&&文件上传agent冰蝎马注入
☆34Mar 17, 2023Updated 3 years ago
Alternatives and similar repositories for MemShell
Users that are interested in MemShell are comparing it to the libraries listed below
Sorting:
- 内存马持久化☆59May 19, 2022Updated 3 years ago
- My personal collection of webshells for educational purposes. Most are custom implementations/adaptations of stuff I found on the interne…☆21May 20, 2024Updated last year
- 《深入理解IAST交互式应用安全测试》Interactive Application Security Testing.☆13Oct 20, 2022Updated 3 years ago
- Memshell☆294Dec 7, 2021Updated 4 years ago
- 基于ysoserial扩展命令执行结果回显 ,生成冰蝎内存马☆89Jul 6, 2023Updated 2 years ago
- 支持注入内存马和Bypass WAF☆29Dec 12, 2023Updated 2 years ago
- ☆309Feb 27, 2025Updated last year
- 内网渗透、工具开发、二进制等相关笔记☆12Mar 26, 2023Updated 2 years ago
- A little tool to play with Windows security☆12Jan 21, 2026Updated 2 months ago
- Nacos JRaft Hessian 反序列化 RCE EXP☆65Jun 13, 2023Updated 2 years ago
- 记录自己学习Java安全的过程,无技术含量 。☆30Aug 15, 2023Updated 2 years ago
- 拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马,支持注入CMD内存马和冰蝎内存马☆511Aug 31, 2022Updated 3 years ago
- OpenFire 管理后台账号密码解密☆30Dec 15, 2020Updated 5 years ago
- Tomcat 冰蝎内存马。☆214Sep 14, 2020Updated 5 years ago
- Hession-Deserialize-RCE 反序列化命令执行☆24Dec 27, 2019Updated 6 years ago
- 一个java代码审计辅助工具☆29Nov 2, 2022Updated 3 years ago
- HCM宏景加解密工具☆49Jun 20, 2025Updated 9 months ago
- AddDefenderExclusions Beacon Object File☆41Jun 25, 2023Updated 2 years ago
- Spring Cloud Gateway远程代码执行漏洞POC,基于命令执行的基础上,增加了反弹shell操作☆14Mar 9, 2022Updated 4 years ago
- ysoserial修改版,着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。☆754Jan 11, 2024Updated 2 years ago
- Spring Actuator端点的BurpSuite被动扫描插件。☆202Nov 2, 2022Updated 3 years ago
- 一款支持自定义的 Java 内存马生成工具|A customizable Java in-memory webshell generation tool.☆2,165Aug 21, 2025Updated 7 months ago
- 魔改版,实现冰蝎直连内存马,无需修改冰蝎客户端☆76Jan 3, 2024Updated 2 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆135Nov 30, 2022Updated 3 years ago
- ☆525Sep 16, 2022Updated 3 years ago
- poc for cve-2017-10661☆11Aug 11, 2017Updated 8 years ago
- fastjson利用,支持tomcat、spring回显,哥斯拉内存马;回显利用链为dhcp、ibatis、c3p0。☆327Mar 15, 2022Updated 4 years ago
- fastjson 80 远程代码执行漏洞复现☆199Sep 7, 2022Updated 3 years ago
- ☆10Dec 21, 2024Updated last year
- 用Java agent实现内存马等功能☆198Jul 27, 2023Updated 2 years ago
- Java反序列化漏洞学习☆14Jul 1, 2021Updated 4 years ago
- JDBC Connection URL Attack☆441Sep 10, 2021Updated 4 years ago
- 攻击Java Web应用-[Java Web安全]☆15Dec 9, 2020Updated 5 years ago
- record some AD security and Red Team contents☆14Dec 10, 2019Updated 6 years ago
- K8S安全攻防思维导图 | Docker安全攻防思维导图☆417Jun 22, 2022Updated 3 years ago
- Neo-reGeorg is a project that seeks to aggressively refactor reGeorg☆10Dec 26, 2022Updated 3 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- A lightweight reverse proxy server that converts TLS traffic to TCP, allowing secure communication between clients and upstream servers.☆79Aug 16, 2024Updated last year
- ☆13May 1, 2023Updated 2 years ago