iceyhexman / flask_memory_shell

Related projects ⓘ

Alternatives and complementary repositories for flask_memory_shell

• lalajun / RMIDeserialize
  RMI 反序列化环境 一步步
  ☆211Updated 4 years ago
• keven1z / weblogic_memshell
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆264Updated 2 years ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆232Updated 3 years ago
• NyDubh3 / Pentesting-Active-Directory-CN
  域渗透脑图中文翻译版
  ☆276Updated 3 years ago
• Y4er / fastjson-bypass-autotype-1.2.68
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆223Updated 2 years ago
• feihong-cs / memShell
  FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
  ☆356Updated 4 years ago
• Litch1-v / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆179Updated 3 years ago
• bigsizeme / fastjson-check
  fastjson 被动扫描、不出网payload生成
  ☆369Updated 3 years ago
• Ch1ngg / JCE
  JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本
  ☆256Updated 3 years ago
• SafeGroceryStore / Caesar
  一个全新的敏感文件发现工具
  ☆268Updated 3 years ago
• AntSwordProject / AntSword-Labs
  Awesome environment for antsword tests
  ☆172Updated 3 years ago
• potats0 / javaSerializationTools
  ☆145Updated 3 years ago
• threedr3am / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆213Updated 2 years ago
• flowerwind / JspFinder
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆175Updated 2 years ago
• dr0op / shiro-550-with-NoCC
  Shiro-550 不依赖CC链利用工具
  ☆447Updated 5 months ago
• 5wimming / gadgetinspector
  利用链、漏洞检测工具
  ☆367Updated 3 months ago
• phith0n / xray-poc-generation
  🧬 辅助生成 XRay YAML POC
  ☆261Updated last year
• 0671 / RabR
  Redis-Attack By Replication (通过主从复制攻击Redis)
  ☆318Updated last year
• f1tz / BCELCodeman
  BCEL encode/decode manager for fastjson payloads
  ☆143Updated 2 years ago
• XTeam-Wing / Hunting-Active-Directory
  个人整理的一些域渗透Tricks，可能有一些错误。
  ☆246Updated 3 years ago
• LiAoRJ / CS_fakesubmit
  一个可以伪装上线Cobaltstrike的脚本
  ☆129Updated 2 years ago
• no-one-sec / idea-project-fish-exploit
  JetBrains系列产品.idea钓鱼反制红队
  ☆301Updated 2 years ago
• A-D-Team / attackRmi
  ☆217Updated 2 years ago