JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）
☆41Dec 22, 2021Updated 4 years ago
Alternatives and similar repositories for JNDIKit
Users that are interested in JNDIKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MysqlHoneypot☆23May 4, 2022Updated 4 years ago
- 动态链接库加载工具☆21Jan 26, 2022Updated 4 years ago
- POC for Spring Kafka Deserialization Vulnerability CVE-2023-34040☆46May 4, 2026Updated 5 months ago
- 静态程序分析工具 主要生成方法的CFG和.java文件的AST☆135Jul 12, 2023Updated 3 years ago
- Shiro内存马注入环境☆64May 3, 2021Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- CVE-2022-22947注入哥斯拉内存马☆27Jun 21, 2023Updated 3 years ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆21Sep 28, 2022Updated 4 years ago
- 用来存放平时写的一些net内存马，仅用于练手，需要可以自行修改☆91May 3, 2022Updated 4 years ago
- JAVA IAST Example☆48Dec 13, 2021Updated 4 years ago
- JavaPassDump☆276Jan 7, 2022Updated 4 years ago
- 增加自定义gadget触发客户端代码执行 绕过高版本JDK远程加载限制☆12May 24, 2022Updated 4 years ago
- Apache Dubbo Hessian2 CVE-2021-43297 demo☆46Jan 18, 2022Updated 4 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆56Sep 6, 2022Updated 4 years ago
- Java内存马注入工具☆251Apr 8, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Bypass UAC on all Windows versions☆13Apr 27, 2025Updated last year
- 集成了截图 键盘记录 剪贴版功能，用于网络限制场景下的信息搜集☆89May 18, 2024Updated 2 years ago
- Get sql server connection configuration information☆27Aug 26, 2024Updated 2 years ago
- ☆20Aug 10, 2022Updated 4 years ago
- ☆16Oct 11, 2022Updated 4 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆280Nov 28, 2023Updated 2 years ago
- DiagTrack Eop (From Service Account to SYSTEM)☆24Jan 13, 2023Updated 3 years ago
- 用Java agent实现内存马等功能☆198Jul 27, 2023Updated 3 years ago
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆15Dec 30, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆185May 10, 2023Updated 3 years ago
- 哥斯拉nacos后渗透插件 maketoken adduser☆148Jul 7, 2023Updated 3 years ago
- Java安全相关，目前主要是CC链研究☆10Sep 1, 2022Updated 4 years ago
- 针对多个框架的高度自定义的内存马一键打入工具 | A highly customized memory shell one-click injection tool for multiple frameworks☆47Feb 6, 2024Updated 2 years ago
- 一款OutLook信息收集工具☆246May 23, 2023Updated 3 years ago
- NTLM/Negotiate authentication over HTTP that supports Pass The Hash Mode (PtH)☆17Sep 13, 2024Updated 2 years ago
- 基于ysoserial扩展命令执行结果回显，生成冰蝎内存马☆88Jul 6, 2023Updated 3 years ago
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- BurpHttpHelper是一款Burpsuite插件，主要用于简化和解决Burpsuite对Http的一些操作.☆115Jan 22, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- JavaAgent内存马☆17Jun 15, 2021Updated 5 years ago
- 一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。☆376Oct 22, 2021Updated 5 years ago
- 一个可以自定规则的动扫描器,支持主动和被动扫描☆25Oct 26, 2021Updated 5 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 3 years ago
- 一个高度可定制化的JNDI和Java反序列化利用工具☆473Jan 17, 2023Updated 3 years ago
- 提取域控日志，支持远程提取☆169Mar 17, 2025Updated last year