ffadd/JNDIKit external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ffadd/JNDIKit

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ffadd/JNDIKit)

Close

ffadd / JNDIKitView on GitHubMore

• External links
• Readme badge

JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）

☆44Dec 22, 2021Updated 4 years ago

Alternatives and similar repositories for JNDIKit

Users that are interested in JNDIKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• Al1ex / MysqlHoneypot

  View on GitHub
  MysqlHoneypot
  ☆24May 4, 2022Updated 3 years ago
• SummerSec / Loader

  View on GitHub
  动态链接库加载工具
  ☆20Jan 26, 2022Updated 4 years ago
• Contrast-Security-OSS / Spring-Kafka-POC-CVE-2023-34040

  View on GitHub
  POC for Spring Kafka Deserialization Vulnerability CVE-2023-34040
  ☆46Oct 8, 2025Updated 5 months ago
• KpLi0rn / ShiroVulnEnv

  View on GitHub
  Shiro内存马注入环境
  ☆63May 3, 2021Updated 4 years ago
• Zh0um1 / CVE-2022-22947

  View on GitHub
  CVE-2022-22947注入哥斯拉内存马
  ☆28Jun 21, 2023Updated 2 years ago
• KpLi0rn / AgentMemShell

  View on GitHub
  JavaAgent内存马
  ☆17Jun 15, 2021Updated 4 years ago
• timwhitez / CLR-RWX

  View on GitHub
  Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间
  ☆22Sep 28, 2022Updated 3 years ago
• corener / JavaPassDump

  View on GitHub
  JavaPassDump
  ☆273Jan 7, 2022Updated 4 years ago
• iiiusky / java_iast_example

  View on GitHub
  JAVA IAST Example
  ☆49Dec 13, 2021Updated 4 years ago
• Pizz33 / GoThief

  View on GitHub
  集成了截图 键盘记录 剪贴版功能，用于网络限制场景下的信息搜集
  ☆89May 18, 2024Updated last year
• longofo / Apache-Dubbo-Hessian2-CVE-2021-43297

  View on GitHub
  Apache Dubbo Hessian2 CVE-2021-43297 demo
  ☆46Jan 18, 2022Updated 4 years ago
• X1r0z / go-ntlmssp

  View on GitHub
  NTLM/Negotiate authentication over HTTP that supports Pass The Hash Mode (PtH)
  ☆17Sep 13, 2024Updated last year
• geekmc / FindShell

  View on GitHub
  内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能
  ☆179May 10, 2023Updated 2 years ago
• crisprss / net_memory_webshell

  View on GitHub
  用来存放平时写的一些net内存马，仅用于练手，需要可以自行修改
  ☆90May 3, 2022Updated 3 years ago
• Tas9er / EOffice9GetShell

  View on GitHub
  泛微E-Office V9.0 批量安全测试 / Code By:Tas9er
  ☆25Nov 27, 2021Updated 4 years ago
• aleenzz / InjectSQLServer

  View on GitHub
  Get sql server connection configuration information
  ☆28Aug 26, 2024Updated last year
• D0Gshuang / ShellcodeLoader_stager

  View on GitHub
  ☆19Aug 10, 2022Updated 3 years ago
• S9MF / ShiroScan2

  View on GitHub
  基于BurpShiroPassiveScan修改增加了Xray回显链生成
  ☆56Sep 6, 2022Updated 3 years ago
• SummerSec / SPATool

  View on GitHub
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆133Jul 12, 2023Updated 2 years ago
• Jeromeyoung / JNDIExploit-1

  View on GitHub
  一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。
  ☆376Oct 22, 2021Updated 4 years ago
• ASkyeye / Artillery

  View on GitHub
  CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…
  ☆14Dec 30, 2023Updated 2 years ago
• p1n93r / javasec

  View on GitHub
  Java安全相关，目前主要是CC链研究
  ☆10Sep 1, 2022Updated 3 years ago
• gubeihc / burp-PocSuite3-POC

  View on GitHub
  ☆15Oct 11, 2022Updated 3 years ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• pap1rman / postnacos

  View on GitHub
  哥斯拉nacos后渗透插件 maketoken adduser
  ☆150Jul 7, 2023Updated 2 years ago
• achuna33 / MYJNDIExploit

  View on GitHub
  自己的JNDI 利用工具，添加一些人性化功能
  ☆131Sep 4, 2022Updated 3 years ago
• 0x00007c00 / JundeadShell

  View on GitHub
  Java内存马注入工具
  ☆252Apr 8, 2023Updated 2 years ago
• MaskCyberSecurityTeam / BurpHttpHelper

  View on GitHub
  BurpHttpHelper是一款Burpsuite插件，主要用于简化和解决Burpsuite对Http的一些操作.
  ☆109Jan 22, 2023Updated 3 years ago
• RowTeam / SharpExchangeKing

  View on GitHub
  Exchange 服务器安全性的辅助测试工具
  ☆331Jul 21, 2023Updated 2 years ago
• 0x3rhy / BOF-DCOMPotato-PrintNotify

  View on GitHub
  Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…
  ☆13Feb 4, 2024Updated 2 years ago
• A0WaQ4 / BurpText4ShellScan

  View on GitHub
  Text4Shell的burp被动扫描插件
  ☆36Dec 29, 2022Updated 3 years ago
• threeworld / Rogue-jndi-1.2

  View on GitHub
  增加自定义gadget触发客户端代码执行 绕过高版本JDK远程加载限制
  ☆12May 24, 2022Updated 3 years ago
• whwlsfb / SpringSpider

  View on GitHub
  Spring Actuator端点的BurpSuite被动扫描插件。
  ☆202Nov 2, 2022Updated 3 years ago
• su18 / hack-fastjson-1.2.80

  View on GitHub
  ☆525Sep 16, 2022Updated 3 years ago
• BambiZombie / FrchannelPlus

  View on GitHub
  帆软bi反序列化漏洞利用工具
  ☆190Mar 23, 2024Updated 2 years ago
• changheluor007 / MemShell-1

  View on GitHub
  Tomcat的Filter型免杀内存马，主要思路是Bypass各种检查手段
  ☆10Nov 26, 2021Updated 4 years ago
• Hypdncy / JNDIBypassExploit

  View on GitHub
  JndiBypass漏洞利用，可动态生成类，防止类注入冲突
  ☆28Aug 16, 2023Updated 2 years ago
• feihong-cs / memShell

  View on GitHub
  FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
  ☆387Nov 6, 2020Updated 5 years ago
• songxiaomo1997 / ScanStation

  View on GitHub
  一个可以自定规则的动扫描器,支持主动和被动扫描
  ☆25Oct 26, 2021Updated 4 years ago