[fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
☆91Sep 2, 2022Updated 3 years ago
Alternatives and similar repositories for FastjsonVulns
Users that are interested in FastjsonVulns are comparing it to the libraries listed below
Sorting:
- ☆524Sep 16, 2022Updated 3 years ago
- ☆239Feb 24, 2026Updated last week
- fastjson 80 远程代码执行漏洞复现☆199Sep 7, 2022Updated 3 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆56Sep 6, 2022Updated 3 years ago
- ☆295May 7, 2022Updated 3 years ago
- 用友 nc 系列密码解密☆61Apr 7, 2023Updated 2 years ago
- JavaPassDump☆272Jan 7, 2022Updated 4 years ago
- 给woodpecker框架量身定制的ysoserial☆608Oct 26, 2022Updated 3 years ago
- Java表达式语句生成器☆194Oct 9, 2023Updated 2 years ago
- Java web路由内存分析工具☆437May 22, 2025Updated 9 months ago
- asp.net内存马检测工具☆283Aug 22, 2023Updated 2 years ago
- ☆307Feb 27, 2025Updated last year
- Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小☆66Jul 4, 2024Updated last year
- 基于frp(0.44.0)二次开发,删除不必要功能,加密配置文件,修改流量以及文件特征☆314Aug 9, 2022Updated 3 years ago
- 用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件☆213Apr 18, 2023Updated 2 years ago
- ☆342Jun 7, 2022Updated 3 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- Mssql利用工具☆276Aug 7, 2023Updated 2 years ago
- fastjson不出网利用、c3p0☆256Jul 30, 2021Updated 4 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案☆277Jan 10, 2023Updated 3 years ago
- rmi打内存马工具,适用于目标用不了ldap的情况☆254Jul 12, 2023Updated 2 years ago
- spring boot Fat Jar 任意写 文件漏洞到稳定 RCE 利用技巧☆754Apr 14, 2021Updated 4 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆279Nov 28, 2023Updated 2 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆597Oct 8, 2022Updated 3 years ago
- Java应用的一些配置文件字典,来源于公开的字典与平时收集☆321Feb 1, 2024Updated 2 years ago
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated last year
- ysoserial修改版,着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。☆753Jan 11, 2024Updated 2 years ago
- 收集内存马打入方式☆506May 20, 2022Updated 3 years ago
- Java Js Engine Payloads All in one☆289Aug 21, 2023Updated 2 years ago
- 拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马,支持注入CMD内存马和冰蝎内存马☆511Aug 31, 2022Updated 3 years ago
- A memory shell for ruoyi☆266Apr 28, 2023Updated 2 years ago
- 域信息收集工具☆412Sep 16, 2022Updated 3 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆342Mar 6, 2022Updated 3 years ago
- CVE-2022-22947 注入Godzilla内存马☆210Apr 26, 2022Updated 3 years ago
- 分享几个直接可用的内存马,记录一下学习过程中看过的文章☆975Mar 23, 2022Updated 3 years ago
- Java RCE 回显测试代码☆1,016Oct 15, 2020Updated 5 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆320Dec 9, 2021Updated 4 years ago
- Exchange 服务器安全性的辅助测试工具☆332Jul 21, 2023Updated 2 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆770Jan 26, 2022Updated 4 years ago