fa1c0n1 / rmi-attack-demoLinks
在学习Java反序列化漏洞的过程中,用来理解Java RMI程序的执行流程,演示如何攻击Java RMI程序的几个示例。
☆9Updated 5 years ago
Alternatives and similar repositories for rmi-attack-demo
Users that are interested in rmi-attack-demo are comparing it to the libraries listed below
Sorting:
- Hamster是基于mitmproxy开发的异步被动扫描框架,基于http代理进行被动扫描,主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能(开发中)。☆69Updated 8 months ago
- 一个可快速“搬运”cookie的Burp Suite插件☆25Updated 7 years ago
- Java RMI反序列化漏洞插件☆48Updated 4 years ago
- ☆4Updated 4 years ago
- common methods that used by my burp extension projects☆51Updated last year
- ☆41Updated 5 years ago
- ☆35Updated 4 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- AWVS12&AWVS13 通用API批量导入脚本 AWVS12 & AWVS13 common API batch import script.☆25Updated 3 years ago
- 资产扫描工具☆46Updated 4 years ago
- 一个可以自定规则的动扫描器,支持主动和被动扫描☆24Updated 3 years ago
- Tomcat基于动态注册Filter的无文件Webshell☆26Updated 5 years ago
- 用于渗透测试、安全运维的插件化并发框架,自写插件可进行-PoC测试、子域发现、端口 扫描等。☆14Updated 4 years ago
- 记录调试分析ysoserial系列的学习过程,主要包含手动构造的一些poc,便于加深对漏洞和工具的理解☆30Updated 5 years ago
- 一键生成Java代码的burp插件/Generate Java script for fuzzing in Burp。☆50Updated 3 years ago
- log4j-patch 修改字节码实现补丁防御☆20Updated 3 years ago
- vulhub-compose是一款屏蔽docker-compose的命令行工具,目的是降低火线平台社区用户使用vulhub靶场的难度,减少学习docker-compose的时间成本;同时,支持直接安装洞态IAST(原灵芝IAST)到vulhub靶场,用于漏洞复现、漏洞挖掘。☆46Updated 4 years ago
- BCEL class转换插件☆25Updated 4 years ago
- CVE-2021-22205 Unauthorized RCE☆68Updated 3 years ago
- IDOR bypass fuzz 权限绕过burp 插件 fuzz (shiro 等)☆27Updated 3 years ago
- CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.☆24Updated 5 years ago
- 基于SpringBoot编写的常见Web漏洞安全开发学习平台☆26Updated 3 years ago
- ☆49Updated 4 years ago
- shiro反序列化检测(只是个玩具23333)☆11Updated last year
- Skywalking远程代码执行漏洞验证☆18Updated 4 years ago
- ThinkPHP各版本反序列化利用代码☆33Updated 4 years ago
- CVE-2019-0230 & s2-059 poc.☆36Updated 4 years ago
- awvs-scan 是一款调用 AWVS 13.x API 的自动化工具☆26Updated 2 years ago
- 日常积累,用以保存学习或比赛中遇到的漏洞复现文件,会有一些基本的说明文件☆17Updated 4 years ago
- CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process…☆25Updated 4 years ago