gml-sec / My-CTF-Challenges

Related projects ⓘ

Alternatives and complementary repositories for My-CTF-Challenges

• LFYSec / XCTF2021Final-Dubbo
  Writeup and environment for XCTF2021Final-Dubbo
  ☆45Updated 3 years ago
• hosch3n / FastjsonVulns
  [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
  ☆90Updated 2 years ago
• waderwu / My-CTF-Challenges
  Collection of CTF Web challenges I made
  ☆49Updated last year
• flowerwind / AutoGenerateXalanPayload
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆87Updated last year
• bitterzzZZ / CVE-2021-43297-POC
  CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE
  ☆38Updated 2 years ago
• xiaopan233 / Java_agent_without_file
  Java agent without file 无文件的Java agent
  ☆76Updated 2 years ago
• cokeBeer / go-cves
  收录go语言编写的项目、框架和组件出现的cve，或者一些相关的利用方式的文章
  ☆37Updated last year
• mstxq17 / badGuyHacker
  一些自己打比赛的捣蛋脚本
  ☆51Updated 3 years ago
• HackJava / Spring
  《Spring漏洞研究》
  ☆44Updated 2 years ago
• phith0n / PaddingZip
  PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.
  ☆62Updated 2 years ago
• tcyba / this_is_my_study
  this_my_ctf
  ☆17Updated 3 years ago
• 0xrumble / BytecodeScreen
  ☆51Updated 2 years ago
• Mount4in / Security-Conference-Topic
  Collect some security conference topics
  ☆36Updated 4 months ago
• wh1t3p1g / tabby-vul-finder
  A vul-finder for loading CPG and automated finding vul-call-chains
  ☆35Updated last month
• Re1own / IoT_Sec
  林中有两条路，我选择了人迹罕至的一条
  ☆32Updated 2 years ago
• Y4tacker / CTFBackup
  备份下比赛附件
  ☆22Updated last year
• H3rmesk1t / Fastjson-Gadgets-Automatic-Scanner
  Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …
  ☆50Updated 2 years ago
• Ant-FG-Lab / non_RCE
  ☆41Updated 3 years ago
• waderwu / nativeRasp
  nativeRasp that can hook native methods
  ☆24Updated last year
• SummerSec / LookupInterface
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆162Updated 2 years ago
• qiannianshuangxue / safe_message_spider
  About Solve CTF offline disconnection problem - based on python3's small crawler, support keyword search and local map bed establishment,…
  ☆42Updated last year
• 0linlin0 / Java
  java
  ☆54Updated last year
• threedr3am / fastjson-blacklist
  打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
  ☆32Updated 4 years ago
• TomAPU / ThinkPHP-Unserialize-Collection
  ThinkPHP各版本反序列化利用代码
  ☆32Updated 4 years ago
• rmb122 / easyrasp
  简单实现的 Java RASP
  ☆35Updated 4 years ago
• lz2y / DubboPOC
  Apache Dubbo漏洞测试Demo及其POC
  ☆61Updated last year