ev0A/ArbitraryFileReadList external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ev0A/ArbitraryFileReadList

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ev0A/ArbitraryFileReadList)

Close

ev0A / ArbitraryFileReadListView on GitHubMore

• External links
• Readme badge

CTF中任意文件读取的fuzz列表 (Arbitrary file read fuzz list in CTF)

☆276Mar 13, 2022Updated 4 years ago

Alternatives and similar repositories for ArbitraryFileReadList

Users that are interested in ArbitraryFileReadList are comparing it to the libraries listed below

• ev0A / Mysqlist

  View on GitHub
  Mysql Server端伪造-任意文件读取-CTF快速利用脚本
  ☆136Sep 13, 2019Updated 6 years ago
• wonderkun / CTFENV

  View on GitHub
  为应对CTF比赛而搭建的各种环境
  ☆154May 9, 2020Updated 5 years ago
• fnmsd / MySQL_Fake_Server

  View on GitHub
  MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize
  ☆1,362Nov 18, 2021Updated 4 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,405Jan 18, 2022Updated 4 years ago
• r35tart / RedisWriteFile

  View on GitHub
  通过 Redis 主从写出无损文件
  ☆718May 25, 2020Updated 5 years ago
• mm0r1 / exploits

  View on GitHub
  Pwn stuff.
  ☆1,804May 31, 2022Updated 3 years ago
• DasSecurity-HatLab / AoiAWD

  View on GitHub
  AoiAWD-专为比赛设计，便携性好，低权限运行的EDR系统。
  ☆1,082Aug 5, 2024Updated last year
• rmb122 / rogue_mysql_server

  View on GitHub
  A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.
  ☆757Dec 2, 2022Updated 3 years ago
• l3m0n / Bypass_Disable_functions_Shell

  View on GitHub
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,198Oct 17, 2023Updated 2 years ago
• wupco / PHP_INCLUDE_TO_SHELL_CHAR_DICT

  View on GitHub
  ☆349Jan 24, 2023Updated 3 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,242Feb 17, 2025Updated last year
• LoRexxar / Kunlun-M

  View on GitHub
  KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。
  ☆2,379Jan 16, 2026Updated 2 months ago
• LandGrey / ClassHound

  View on GitHub
  利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码
  ☆712May 10, 2021Updated 4 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆754Apr 14, 2021Updated 4 years ago
• leohearts / awd-watchbird

  View on GitHub
  A powerful PHP WAF for AWD
  ☆774Jul 7, 2024Updated last year
• c0ny1 / passive-scan-client

  View on GitHub
  Burp被动扫描流量转发插件
  ☆1,460Jun 17, 2024Updated last year
• Li4n0 / My-CTF-Challenges

  View on GitHub
  My CTF Challenges
  ☆16Nov 6, 2024Updated last year
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,015Oct 15, 2020Updated 5 years ago
• yangyangwithgnu / bypass_disablefunc_via_LD_PRELOAD

  View on GitHub
  bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
  ☆1,169Aug 7, 2021Updated 4 years ago
• thunderbarca / Caesar

  View on GitHub
  一个全新的敏感文件发现工具
  ☆225Jan 10, 2021Updated 5 years ago
• TideSec / Decrypt_Weblogic_Password

  View on GitHub
  搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。
  ☆833Nov 7, 2023Updated 2 years ago
• threedr3am / learnjavabug

  View on GitHub
  Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
  ☆2,693Mar 14, 2024Updated 2 years ago
• QAX-A-Team / WeblogicEnvironment

  View on GitHub
  Weblogic环境搭建工具
  ☆796Apr 23, 2020Updated 5 years ago
• tarunkant / Gopherus

  View on GitHub
  This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
  ☆3,324Apr 18, 2023Updated 2 years ago
• Lucifer1993 / TPscan

  View on GitHub
  一键ThinkPHP漏洞检测
  ☆1,164Nov 1, 2023Updated 2 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆270Mar 4, 2022Updated 4 years ago
• c0ny1 / java-memshell-scanner

  View on GitHub
  通过jsp脚本扫描java web Filter/Servlet型内存马
  ☆989Mar 9, 2023Updated 3 years ago
• phith0n / code-breaking

  View on GitHub
  Code-Breaking Puzzles
  ☆292Apr 6, 2025Updated 11 months ago
• LFYSec / XCTF2021Final-Dubbo

  View on GitHub
  Writeup and environment for XCTF2021Final-Dubbo
  ☆44May 31, 2021Updated 4 years ago
• Richard-Tang / x1DecoderPlus

  View on GitHub
  AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell
  ☆163Sep 28, 2021Updated 4 years ago
• kingkaki / ctf-wscan

  View on GitHub
  为ctf而生的web扫描器
  ☆322Oct 22, 2019Updated 6 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 5 years ago
• safe6Sec / Fastjson

  View on GitHub
  Fastjson姿势技巧集合
  ☆1,833Oct 20, 2023Updated 2 years ago
• ZeddYu / ReadFlag

  View on GitHub
  To solve some readflag situation in ctfs
  ☆33Jan 12, 2021Updated 5 years ago
• zsxsoft / reGeorg

  View on GitHub
  A modified reGeorg for One-line PHP Shell.
  ☆86Nov 18, 2018Updated 7 years ago
• zhzyker / exphub

  View on GitHub
  Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…
  ☆4,273Apr 4, 2021Updated 4 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆535Aug 25, 2020Updated 5 years ago
• zsxsoft / my-ctf-challenges

  View on GitHub
  My CTF Challenges
  ☆216Jan 4, 2026Updated 2 months ago
• timwhitez / crawlergo_x_XRAY

  View on GitHub
  360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能
  ☆1,183Nov 10, 2021Updated 4 years ago