Alternatives and similar repositories for sec-note:

Users that are interested in sec-note are comparing it to the libraries listed below

• Rvn0xsy / SMTP-NC
  SMTP Netcat , test SMTP protocol
  ☆105Updated 3 years ago
• cckuailong / YarnRpcRCE
  ☆81Updated 3 years ago
• hosch3n / FastjsonVulns
  [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
  ☆91Updated 2 years ago
• longofo / PaddingOracleAttack-Shiro-721
  Shiro-721 Padding Oracle Attack
  ☆70Updated 3 years ago
• SummerSec / LookupInterface
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆163Updated 2 years ago
• su18 / rasp-vuln
  当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。
  ☆78Updated 2 years ago
• ThestaRY7 / supplier
  主流供应商的一些攻击性漏洞汇总
  ☆105Updated 3 years ago
• welk1n / FastjsonPocs
  一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。
  ☆56Updated 5 years ago
• Y4er / yaml-payload
  Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg
  ☆132Updated 4 years ago
• 8ypass / weblogicExploit
  weblogic历史漏洞利用工具
  ☆90Updated 2 years ago
• K1p2y3 / Tencent_Yun_tools
  ☁️Tencent Cloud AccessKey tools
  ☆16Updated 6 months ago
• R17a-17 / JavaVulnSummary
  Java漏洞分析汇合
  ☆143Updated 3 years ago
• wuppp / releaseBehinderShell
  卸载冰蝎内存马
  ☆68Updated 3 years ago
• rufherg / WebLogic_Basic_Poc
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆93Updated 4 years ago
• xiaopan233 / Java_agent_without_file
  Java agent without file 无文件的Java agent
  ☆78Updated 2 years ago
• Y4er / javaagent-tomcat-memshell
  使用java agent反序列化注入内存shell
  ☆67Updated 4 years ago
• 0xrumble / BytecodeScreen
  ☆51Updated 2 years ago
• vulhub / Apereo-CAS-Attack
  WIP: Demo for Attacking Apereo CAS
  ☆89Updated 4 years ago
• rabbitmask / DruidCrack
  Druid 密文解密工具
  ☆132Updated 4 years ago
• KpLi0rn / ysoserial
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆69Updated 3 years ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆233Updated 4 years ago
• AlphabugX / godzilla_decode
  Godzilla java Decode,哥斯拉jsp(内存马)流量解密
  ☆105Updated 3 years ago
• cyal1 / host_scan
  这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go
  ☆114Updated 2 years ago
• w0x68y / bypassWAF
  bypassD盾、安全狗、云锁
  ☆107Updated 3 years ago
• iSafeBlue / fastjson-autotype-bypass-demo
  fastjson 1.2.68 版本 autotype bypass
  ☆140Updated 2 years ago
• zhutougg / LandrayDES
  蓝凌OA的前后台密码的加解密工具
  ☆94Updated 4 years ago
• threedr3am / dubbo-exp
  dubbo快速利用exp，基本上老版本覆盖100%。
  ☆104Updated last year
• xyy-ws / NoAgent-memshell-scanner
  ☆106Updated 3 years ago
• longofo / Apache-Dubbo-Hessian2-CVE-2021-43297
  Apache Dubbo Hessian2 CVE-2021-43297 demo
  ☆46Updated 3 years ago
• Wrin9 / weaverOA_sql_RCE
  泛微OA_V9全版本的SQL远程代码执行漏洞
  ☆157Updated 2 years ago