iSafeBlue/fastjson-autotype-bypass-demo external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

iSafeBlue/fastjson-autotype-bypass-demo

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/iSafeBlue/fastjson-autotype-bypass-demo)

Close

iSafeBlue / fastjson-autotype-bypass-demoView on GitHubMore

• External links
• Readme badge

fastjson 1.2.68 版本 autotype bypass

☆141Aug 9, 2026Updated last week

Alternatives and similar repositories for fastjson-autotype-bypass-demo

Users that are interested in fastjson-autotype-bypass-demo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• iSafeBlue / redis-rce

  View on GitHub
  Redis RCE 的几种方法
  ☆90Jun 5, 2024Updated 2 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆214May 19, 2020Updated 6 years ago
• Y4er / fastjson-bypass-autotype-1.2.68

  View on GitHub
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆229Oct 12, 2022Updated 3 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆256Jul 1, 2016Updated 10 years ago
• lalajun / RMIDeserialize

  View on GitHub
  RMI 反序列化环境 一步步
  ☆214Aug 31, 2020Updated 5 years ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆272Mar 4, 2022Updated 4 years ago
• Tycx2ry / SweetPotato_CS

  View on GitHub
  修改的SweetPotato，使之可以用于CobaltStrike v4.0
  ☆245Apr 30, 2020Updated 6 years ago
• LandGrey / ClassHound

  View on GitHub
  利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码
  ☆710May 10, 2021Updated 5 years ago
• NS-Sp4ce / TongDaOA-Fake-User

  View on GitHub
  通达OA 任意用户登录漏洞
  ☆358Aug 27, 2020Updated 5 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆844Jun 7, 2022Updated 4 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆455Mar 24, 2022Updated 4 years ago
• SummerSec / LookupInterface

  View on GitHub
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆166Apr 10, 2022Updated 4 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms

  View on GitHub
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆311Jun 17, 2022Updated 4 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆821Sep 23, 2022Updated 3 years ago
• GPUs on demand by Runpod - Special Offer Available • Ad
  Run AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
• pyn3rd / Apache-Tomcat-MongoDB-Remote-Code-Execution

  View on GitHub
  Apache Tomcat + MongoDB Remote Code Execution
  ☆114Jan 15, 2021Updated 5 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,008Oct 15, 2020Updated 5 years ago
• Maskhe / CVE-2020-15148-bypasses

  View on GitHub
  几条关于CVE-2020-15148（yii2反序列化）的绕过
  ☆74Sep 21, 2020Updated 5 years ago
• potats0 / javaSerializationTools

  View on GitHub
  ☆145Jan 21, 2021Updated 5 years ago
• Slzdude / behinder_source

  View on GitHub
  Behinder3.0 Beta4 源码（Decompile and Fixed）
  ☆207Sep 1, 2020Updated 5 years ago
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆484Dec 9, 2020Updated 5 years ago
• Y4er / CVE-2020-2883

  View on GitHub
  Weblogic coherence.jar RCE
  ☆176May 10, 2020Updated 6 years ago
• threedr3am / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆212Jan 17, 2022Updated 4 years ago
• threedr3am / ZhouYu

  View on GitHub
  （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）
  ☆616Dec 29, 2021Updated 4 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• 5up3rc / weblogic_cmd

  View on GitHub
  weblogic t3 deserialization rce
  ☆266Jul 13, 2017Updated 9 years ago
• jiangsir404 / POC-S

  View on GitHub
  POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC
  ☆356Mar 12, 2020Updated 6 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆531Aug 25, 2020Updated 5 years ago
• dpu / coremail-address-book

  View on GitHub
  📧Coremail邮件系统组织通讯录导出脚本
  ☆158Sep 28, 2021Updated 4 years ago
• Artemis1029 / Java_xmlhack

  View on GitHub
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆167Apr 5, 2019Updated 7 years ago
• tobechenghuai / Shiro_721_Padding_Oracle_RCE

  View on GitHub
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆67Nov 20, 2019Updated 6 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload

  View on GitHub
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Feb 8, 2020Updated 6 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆433May 8, 2023Updated 3 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆761Apr 14, 2021Updated 5 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,398Jan 18, 2022Updated 4 years ago
• langligelang / CAS_EXP

  View on GitHub
  CAS 硬编码 远程代码执行漏洞
  ☆126Jun 4, 2021Updated 5 years ago
• potats0 / CasExp

  View on GitHub
  Apereo CAS exploit tool
  ☆59Jun 30, 2022Updated 4 years ago
• r35tart / RedisWriteFile

  View on GitHub
  通过 Redis 主从写出无损文件
  ☆719May 25, 2020Updated 6 years ago
• Ch1ngg / WebLogicPasswordDecryptorUi

  View on GitHub
  解密weblogic AES或DES加密方法
  ☆233Dec 3, 2020Updated 5 years ago
• uknowsec / SharpToolsAggressor

  View on GitHub
  内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~
  ☆501Feb 13, 2020Updated 6 years ago