Docker lab + one-payload exploit + defensive scanner for the fastjson 1.2.66-1.2.83 @JSONType remote-class-load RCE (SSRF->defineClass under Spring Boot LaunchedURLClassLoader; autoType OFF; parseObject binding is not a mitigation)
☆95Jul 20, 2026Updated this week
Alternatives and similar repositories for fastjson-jsontype-rce-lab
Users that are interested in fastjson-jsontype-rce-lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 自己写的一些poc脚本☆13Feb 23, 2024Updated 2 years ago
- Fastjson + MySQL 条件下不出网利用测试环境☆51Dec 6, 2025Updated 7 months ago
- ☆19May 1, 2026Updated 2 months ago
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆18Aug 25, 2025Updated 10 months ago
- Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） 注入哥斯拉内存马☆61May 16, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- FTP lnk调用pythonw程序，用于攻防钓鱼场景下免杀运行捆绑木马文件☆80Aug 27, 2024Updated last year
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆376Mar 25, 2026Updated 3 months ago
- 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY …☆835Sep 18, 2023Updated 2 years ago
- CVE-2025-55182-bypass-waf☆31Jan 8, 2026Updated 6 months ago
- TongWebEJB漏洞利用工具☆28Apr 24, 2026Updated 2 months ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆463Jan 12, 2025Updated last year
- Extract website information from Vue☆284Aug 29, 2023Updated 2 years ago
- 幽狼AI Shell：首款支持AI渗透的高级WebShell & C2管理工具，内置WebShell MCP服务器，支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，Shell…☆248Updated this week
- Fastjson姿势技巧集合☆1,855Oct 20, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 万径千机-网络安全AI伙伴员工☆96Jul 18, 2025Updated last year
- iis高版本短文件名猜解脚本，适用于iis7.5~10.x版本的iis中间件。☆71Apr 6, 2025Updated last year
- ☆36Jun 9, 2023Updated 3 years ago
- 一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理☆294Aug 8, 2023Updated 2 years ago
- Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhoo…☆28Jun 12, 2026Updated last month
- Nacos Derby命令执行 漏洞利用脚本☆154Apr 7, 2025Updated last year
- xxl-job漏洞综合利用工具☆160Jun 3, 2025Updated last year
- mac标签栏工具,mac工具箱☆24Dec 10, 2024Updated last year
- 本程序为美国NSA的方程式工具包图形界面版，由ABC_123于2017年开始编写，仅用来扫描和验证MS17-010、MS09-050、MS08-067漏洞，并可协助管理员修复系统漏洞。☆560Jul 12, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆36Jan 15, 2022Updated 4 years ago
- CVE-2023-34992: Fortinet FortiSIEM Command Injection Proof of Concept Exploit☆27May 21, 2024Updated 2 years ago
- 微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。☆361Apr 3, 2026Updated 3 months ago
- ☆117Jun 17, 2026Updated last month
- Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用☆854Jul 7, 2023Updated 3 years ago
- 哥斯拉nacos后渗透插件 maketoken adduser☆149Jul 7, 2023Updated 3 years ago
- ☆20Feb 27, 2022Updated 4 years ago
- CVE-2022-29221 Proof of Concept Code - Smarty RCE☆16Apr 6, 2026Updated 3 months ago
- net-audit-skills☆51Jun 1, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆18Aug 15, 2024Updated last year
- 一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.☆2,220Aug 21, 2025Updated 11 months ago
- nginx WebShell/内存马，更优雅的nignx backdoor☆323Jan 4, 2024Updated 2 years ago
- ☆19Oct 2, 2022Updated 3 years ago
- 万户数据库解密☆21Dec 3, 2023Updated 2 years ago
- Hadoop Yan ResourceManager unauthorized RCE☆39Nov 26, 2021Updated 4 years ago
- Go 代码混淆工具，使用 AST (抽象语法树) 技术实现跨文件的代码混淆，同时保证混淆后的代码可编译和可执行。☆177Jul 2, 2026Updated 2 weeks ago