☆85Oct 8, 2019Updated 6 years ago
Alternatives and similar repositories for XXEpayload
Users that are interested in XXEpayload are comparing it to the libraries listed below
Sorting:
- ☆17Oct 25, 2018Updated 7 years ago
- 整理收集Struts2漏洞环境☆270Jan 9, 2018Updated 8 years ago
- Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch☆114May 21, 2018Updated 7 years ago
- 常用系统服务默认端口列表☆13Apr 25, 2017Updated 8 years ago
- An AntSword's plugin to scan webshell☆16Sep 2, 2019Updated 6 years ago
- A fake JDBC driver that allows OS command execution.☆125Oct 2, 2022Updated 3 years ago
- ☆145Jun 20, 2018Updated 7 years ago
- 更快速的进行Web应用指纹识别☆170May 9, 2019Updated 6 years ago
- 漏洞扫描:st2、tomcat、未授权访问等等☆288Apr 26, 2019Updated 6 years ago
- flash 劫持轮子,CSRF,劫持,跳转,swf 有需求可以提issues ,src挖掘,劫持response☆86Nov 9, 2019Updated 6 years ago
- ☆41Nov 9, 2018Updated 7 years ago
- 总结了一下2019年在JVM环境中使用XXE攻击的知识☆58Oct 31, 2019Updated 6 years ago
- java unserialize vul for weblogic exploit☆176Jul 20, 2018Updated 7 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆518Jul 29, 2020Updated 5 years ago
- 一个专门用于开发安全工具的HTTP类库.☆22Dec 5, 2019Updated 6 years ago
- ☆16Feb 26, 2018Updated 8 years ago
- CVE-2018-15982_EXP_IE☆12Dec 12, 2018Updated 7 years ago
- docker 未授权访问漏洞利用脚本☆140May 18, 2016Updated 9 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- CVE-2018-2628 & CVE-2018-2893☆78Jul 20, 2018Updated 7 years ago
- weblogic 漏洞扫描工具☆345May 17, 2019Updated 6 years ago
- CVE-2018-3191 反弹shell☆16Oct 23, 2018Updated 7 years ago
- 用于快速探测未授权MongoDB数据库结构,取第一条内容,并统计数据数量。A tool for unauthorized MongoDB database , take the first content, and the number of statistical da…☆26Dec 5, 2016Updated 9 years ago
- NagaScan is a distributed passive scanner for Web application.☆92May 16, 2017Updated 8 years ago
- 泛微ecology OA系统接口存在数据库配置信息泄露漏洞☆50Jul 13, 2020Updated 5 years ago
- 可能有一些你没见过的端口扫描脚本☆12Nov 28, 2018Updated 7 years ago
- 一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项☆78Jul 21, 2020Updated 5 years ago
- CVE-2017-10271 POC☆29Jan 10, 2018Updated 8 years ago
- ueditor .net getshell☆97Aug 27, 2018Updated 7 years ago
- 自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch),包含未授权访问及常规弱口令检测☆567Dec 1, 2017Updated 8 years ago
- CVE-2018-2893-PoC☆104Oct 27, 2018Updated 7 years ago
- PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM☆52Mar 14, 2018Updated 7 years ago
- CVE-2018-3245-PoC☆172Jul 13, 2021Updated 4 years ago
- some java code i met or i used☆29May 7, 2019Updated 6 years ago
- JRE8u20_RCE_Gadget☆255Jul 1, 2016Updated 9 years ago
- 便捷地使用PostgreSQL自定义函数来执行系统命令,适用于数据库管理员知道postgres密码却不知道ssh或RDP密码的时候在服务器执行系统命令。☆55Mar 10, 2020Updated 5 years ago
- 做过的实验,踩过的坑☆40Jun 7, 2018Updated 7 years ago
- Web App Monitor☆228Sep 20, 2018Updated 7 years ago
- PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能☆148May 14, 2018Updated 7 years ago