hayasec / POC-Collect

Related projects ⓘ

Alternatives and complementary repositories for POC-Collect

• jas502n / fastjson-1.2.60-rce
  autoType enable
  ☆36Updated 5 years ago
• b1ngz / spring-boot-actuator-cloud-vul
  Spring Boot Actuator + Spring Cloud Vul Env
  ☆19Updated 4 years ago
• c26root / TWeb
  ☆22Updated 6 years ago
• jas502n / Shiro_Xray
  CommonsBeanutils1,CommonsCollectionsK1
  ☆58Updated 4 years ago
• OneSourceCat / BcelPayloadGenerator
  A fastjson payload generator
  ☆56Updated 4 years ago
• tobechenghuai / Shiro_721_Padding_Oracle_RCE
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆68Updated 5 years ago
• jas502n / fastjson-1.2.61-RCE
  fastjson-1.2.61-RCE
  ☆33Updated 5 years ago
• jas502n / SHIRO-721
  RememberMe Padding Oracle Vulnerability RCE
  ☆71Updated 5 years ago
• aboutbo / tools
  ☆19Updated 3 years ago
• xixiliaaa / bypass
  ☆9Updated 5 years ago
• n0thing0x01 / session_enum
  通过NetSessionEnum获取域内机器对应用户
  ☆66Updated 4 years ago
• is101101 / sqlmap_chunked_proxy
  sqlmap分块传输代理
  ☆51Updated 5 years ago
• EvilPulsar / S2-061
  some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute
  ☆69Updated 3 years ago
• jas502n / SHIRO-550
  Shiro RememberMe 1.2.4 反序列化 漏洞
  ☆52Updated 5 years ago
• jas502n / zentao-getshell
  禅道8.2 - 9.2.1前台Getshell
  ☆79Updated 5 years ago
• hl0rey / Web_ExternalC2_Demo
  Web ExternalC2 Demo
  ☆50Updated 4 years ago
• T3st0r-Git / hack_postgres
  便捷地使用PostgreSQL自定义函数来执行系统命令，适用于数据库管理员知道postgres密码却不知道ssh或RDP密码的时候在服务器执行系统命令。
  ☆54Updated 4 years ago
• scanfsec / AggressorCNA
  Cobalt Strike Aggressor Scripts
  ☆69Updated 4 years ago
• r35tart / RedisDirScan
  此脚本用于测试 Rdies 未授权访问，在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下，进行WEB目录探测
  ☆73Updated 5 years ago
• c26root / URLPollution
  ☆18Updated 6 years ago
• UnicodeSec / Blogs
  宽字节安全团队的博客
  ☆30Updated 3 years ago
• z1Ro0 / tomcat_nofile_webshell
  Tomcat基于动态注册Filter的无文件Webshell
  ☆26Updated 4 years ago