Java应用的一些配置文件字典,来源于公开的字典与平时收集
☆321Feb 1, 2024Updated 2 years ago
Alternatives and similar repositories for JavaFileDict
Users that are interested in JavaFileDict are comparing it to the libraries listed below
Sorting:
- Java web路由内存分析工具☆437May 22, 2025Updated 9 months ago
- AK资源管理工具,阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret,利用AK获取资源信息和操作资源,ECS/CVM/E2/UHOST/ECI/BCC执行命令,OSS/COS/S3/BOS…☆778Feb 13, 2025Updated last year
- 注入JVM进程 动态获取目标进程连接的数据库☆342Mar 6, 2022Updated 3 years ago
- 收集内存马打入方式☆506May 20, 2022Updated 3 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- Java RCE 回显测试代码☆1,016Oct 15, 2020Updated 5 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆320Dec 9, 2021Updated 4 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- CVE-2022-22947 注入Godzilla内存马☆210Apr 26, 2022Updated 3 years ago
- 域控安全one for all☆736Sep 9, 2024Updated last year
- rmi打内存马工具,适用于目标用不了ldap的情况☆254Jul 12, 2023Updated 2 years ago
- JavaPassDump☆272Jan 7, 2022Updated 4 years ago
- Fastjson姿势技巧集合☆1,824Oct 20, 2023Updated 2 years ago
- 一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webs…☆1,467Apr 25, 2024Updated last year
- fastjson不出网利用、c3p0☆255Jul 30, 2021Updated 4 years ago
- Exchange 服务器安全性的辅助测试工具☆332Jul 21, 2023Updated 2 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- 各种数据库的利用姿势☆1,034Jan 3, 2025Updated last year
- ☆523Sep 16, 2022Updated 3 years ago
- 获取 alibaba druid 一些 sessions , sql , urls☆292Apr 4, 2025Updated 10 months ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆770Jan 26, 2022Updated 4 years ago
- Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件☆1,314Jun 29, 2024Updated last year
- 基于burpsuite的资产分析工具☆474Apr 29, 2023Updated 2 years ago
- 拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马,支持注入CMD内存马和冰蝎内存马☆511Aug 31, 2022Updated 3 years ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆450Jun 14, 2022Updated 3 years ago
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆866Jun 24, 2024Updated last year
- Burp插件,根据自定义来达到对数据包的处理(适用于加解密、爆破等),类似mitmproxy,不同点在于经过了burp中转,在自动加解密的基础上,不影响APP、网站加解密正常逻辑等。☆1,327Dec 14, 2025Updated 2 months ago
- fastjson 被动扫描、不出网payload生成☆367Nov 19, 2021Updated 4 years ago
- heapdump敏感信息查询工具,例如查找 spring heapdump中的密码明文,AK,SK等☆1,433May 21, 2024Updated last year
- 一款OutLook信息收集工具☆244May 23, 2023Updated 2 years ago
- 一款基于BurpSuite的被动式FastJson检测插件☆1,238Oct 1, 2022Updated 3 years ago
- WebSocket 内存马/Webshell,一种新型内存马/WebShell技术☆1,487Apr 10, 2023Updated 2 years ago
- JavaGadgetGenerator 工具,支持 ysoserial,Hessian,字节码,Expr/SSTI,Shiro,JDBC 等 Gadget 生成,封装,混淆,出网延迟探测,内存马注入等...☆549Dec 7, 2025Updated 2 months ago
- ☆342Oct 11, 2025Updated 4 months ago
- DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。☆456Aug 20, 2025Updated 6 months ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆171Aug 9, 2023Updated 2 years ago
- HeapDump敏感信息提取工具☆1,632Dec 15, 2025Updated 2 months ago
- Fastjson扫描器,可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,050Oct 7, 2022Updated 3 years ago
- 互联网厂商API利用工具。☆555Sep 13, 2024Updated last year