演示dubbo rpc Apache commons collections 的Java序列化漏洞
☆42Nov 13, 2015Updated 10 years ago
Alternatives and similar repositories for dubbo-apache-commons-collections-bug
Users that are interested in dubbo-apache-commons-collections-bug are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Shiro_721 exp 纯手工实现Padding Oracle整个过程☆67Nov 20, 2019Updated 6 years ago
- Native Java serialization filter blacklist for common gadgets☆20Sep 12, 2019Updated 7 years ago
- CVE-2020-5398 - RFD(Reflected File Download) Attack for Spring MVC☆84Dec 15, 2022Updated 3 years ago
- CVE-2018-8021 Proof-Of-Concept and Exploit☆104Dec 3, 2018Updated 7 years ago
- ☆32Dec 6, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"☆101Sep 20, 2019Updated 7 years ago
- PoC for Scala and Groovy☆14Apr 4, 2016Updated 10 years ago
- X41 BeanStack - Stack Trace Fingerprinting BETA☆54Dec 3, 2025Updated 10 months ago
- ☆12Aug 5, 2015Updated 11 years ago
- Java通用漏洞修复安全组件☆61Jul 12, 2025Updated last year
- ☆13Apr 11, 2018Updated 8 years ago
- Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.☆12Sep 30, 2018Updated 8 years ago
- Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4☆114May 17, 2019Updated 7 years ago
- Java层frida hook学习笔记 https://uknowsec.cn☆47Feb 6, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- NagaScan is a distributed passive scanner for Web application.☆92May 16, 2017Updated 9 years ago
- The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.☆18Apr 9, 2018Updated 8 years ago
- A command-line fuzzer for the Apache JServ Protocol (ajp13)☆98Nov 15, 2022Updated 3 years ago
- Native Java-based deserialization exploit for WebLogic T3 (and T3S) listeners.☆34Mar 2, 2020Updated 6 years ago
- RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl☆208Mar 10, 2019Updated 7 years ago
- https://jira.atlassian.com/browse/JRASERVER-69793☆10Sep 16, 2019Updated 7 years ago
- oauth2研究: 实现代码、漏洞利用、修复方案☆19May 21, 2019Updated 7 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- 提取phpinfo()敏感信息☆11Nov 23, 2018Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Apache Log4j 1.2.X存在反序列化远程代码执行漏洞☆78Dec 25, 2019Updated 6 years ago
- 记录整理日常java安全分析代码☆14Dec 25, 2018Updated 7 years ago
- 用于演示Java Web项目中，漏洞的成因及修复方案，可用于黑盒测试和白盒测试，部分修复方案可用于生产环境。☆43Apr 20, 2018Updated 8 years ago
- JRE8u20_RCE_Gadget☆254Jul 1, 2016Updated 10 years ago
- Detect kerberos attacks in pcap files☆29Dec 13, 2015Updated 10 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆215Aug 17, 2017Updated 9 years ago
- apache solr 5.x - 8.2.0 rce (with config api)☆11Oct 31, 2019Updated 6 years ago
- guest→system（UAC手动提权）☆72Mar 18, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 参考《利用分块传输吊打所有WAF》修改的requests的Adapter☆98Jan 31, 2019Updated 7 years ago
- bypass JEP290 RaspHook code☆63Sep 21, 2020Updated 6 years ago
- Weblogic-CVE-2018-3191远程代码命令执行漏洞☆68Oct 24, 2018Updated 8 years ago
- ZZCMS v8.2-重装GETSHELL工具☆11May 8, 2018Updated 8 years ago
- 梧桐百科投稿通道☆20May 21, 2018Updated 8 years ago
- kiwi：安全源码审计工具☆245Aug 12, 2019Updated 7 years ago
- A fake JDBC driver that allows OS command execution.☆124Oct 2, 2022Updated 4 years ago