GitLab CE/EE Preauth RCE using ExifTool
☆237Jan 16, 2022Updated 4 years ago
Alternatives and similar repositories for CVE-2021-22205
Users that are interested in CVE-2021-22205 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆340Jun 7, 2022Updated 4 years ago
- zip slip☆39Apr 7, 2023Updated 3 years ago
- 帆软/致远密码解密工具☆363Jul 29, 2021Updated 5 years ago
- 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能☆282Nov 28, 2023Updated 2 years ago
- fastjson 被动扫描、不出网payload生成☆368Nov 19, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 基于dbcp的fastjson rce 回显☆198Jun 28, 2021Updated 5 years ago
- vhost password decrypt☆261Oct 9, 2024Updated last year
- ZipCreater主要应用于跨目录的文件上传漏洞的利用,它能够快速进行压缩包生成。☆184Apr 6, 2022Updated 4 years ago
- Shiro-550 不依赖CC链利用工具☆449Jun 19, 2024Updated 2 years ago
- 适合在命令行中使用的轻巧的SQL Server数据库安全检测工具☆431Oct 23, 2021Updated 4 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆776Jan 26, 2022Updated 4 years ago
- Exchange 服务器安全性的辅助测试工具☆333Jul 21, 2023Updated 3 years ago
- Windows活动目录中的LDAP信息收集工具☆234Oct 9, 2021Updated 4 years ago
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。☆110Jan 8, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- One-click injection into the SSHD process to record and send the password for ssh login☆427Mar 12, 2024Updated 2 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆760Apr 14, 2021Updated 5 years ago
- Pocsuite3 For CVE-2021-22205☆86Oct 28, 2021Updated 4 years ago
- A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …☆269Oct 17, 2025Updated 9 months ago
- Java RCE 回显测试代码☆1,010Oct 15, 2020Updated 5 years ago
- ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。☆1,651Jun 16, 2024Updated 2 years ago
- 提取DC日志,快速获取域用户对应IP地址☆311Mar 21, 2022Updated 4 years ago
- C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection☆249Mar 31, 2021Updated 5 years ago
- CVE-2021-21972 Exploit☆500Jun 8, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 用java实现构造openwire协议,利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆289Nov 20, 2023Updated 2 years ago
- 一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webs…☆1,481Apr 25, 2024Updated 2 years ago
- 项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,901Jan 15, 2024Updated 2 years ago
- Xshell全版本密码恢复工具☆944Jun 8, 2023Updated 3 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆322Dec 9, 2021Updated 4 years ago
- 域控安全one for all☆740Sep 9, 2024Updated last year
- AK资源管理工具,阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret,利用AK获取资源信息和操作资源,ECS/CVM/E2/UHOST/ECI/BCC执行命令,OSS/COS/S3/BOS…☆790Feb 13, 2025Updated last year
- 一款可以在不出网的环境下进行反向代理及cs上线的工具☆492Apr 26, 2023Updated 3 years ago
- 利用 NTLMSSP 探测 Windows 信息☆173Aug 24, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具☆2,021May 21, 2024Updated 2 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆343Mar 6, 2022Updated 4 years ago
- ☆297May 7, 2022Updated 4 years ago
- ☆196Dec 22, 2021Updated 4 years ago
- 获取服务器或域控登录日志☆280Sep 8, 2023Updated 2 years ago
- Yet another SharpSphere☆227Aug 1, 2021Updated 4 years ago
- 创建隐藏计划任务,权限维持,Bypass AV☆559Sep 1, 2021Updated 4 years ago