j2ekim / Security_Service_Interviews

Related projects: ⓘ

• coffeehb / Spring4Shell
  一个Spring4Shell 被动式检测的Burp插件
  ☆93Updated 2 years ago
• K1p2y3 / Tencent_Yun_tools
  ☁️Tencent Cloud AccessKey tools
  ☆16Updated 2 months ago
• r00tSe7en / log4jScan_Modify
  对接JNDIMonitor的Burp Suite被动扫描插件
  ☆23Updated 2 years ago
• Lotus6 / SpringExploit
  Spring core bean 日志 getshell 和 Spring Cloud Function SpEL 命令执行。
  ☆35Updated 2 years ago
• ghealer / G_Scan
  一个超级缝合怪的图形化渗透工具
  ☆37Updated 3 years ago
• chaosec2021 / CVE-2022-22947-POC
  ☆34Updated this week
• z1un / NC-BeanShell-RCE
  CNVD-2021-30167 用友NC BeanShell远程代码执行
  ☆31Updated 3 years ago
• winezer0 / burp-wildcard-plus
  burpsuite wildcard 插件维护分支
  ☆1Updated last year
• mieeA / SpringWebflux-MemShell
  ☆51Updated this week
• dream0x01 / shiro-framework
  ☆37Updated this week
• tangxiaofeng7 / smartscan
  burpsuite插件-被动无感识别指纹-主动poc扫描
  ☆20Updated last week
• nice0e3 / Cas_Exploit
  ☆70Updated this week
• vaycore / vaycat
  ☆46Updated this week
• yyhuni / shiroMemshell
  利用shiro反序列化注入冰蝎内存马
  ☆33Updated 2 years ago
• 4nth0ny1130 / shisoserial
  一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.
  ☆23Updated 2 years ago
• S9MF / ShiroScan2
  基于BurpShiroPassiveScan修改增加了Xray回显链生成
  ☆53Updated 2 years ago
• sma11new / HunterExport
  ☆27Updated this week
• sp4zcmd / Ruoyi-All
  若依后台定时任务一键利用
  ☆17Updated 2 years ago
• woodpecker-framework / woodpecker-requests
  woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。
  ☆68Updated last year
• ce-automne / FastjsonPatrol
  一款探测fastjson漏洞的BurpSuite插件
  ☆60Updated 2 years ago
• lz520520 / encrypt-js
  ☆35Updated 2 years ago
• shuimuLiu / Behinder-Base65
  ☆17Updated this week
• bkfish / yaml-payload-for-Win
  用于windows反弹shell的yaml-payload
  ☆66Updated 3 years ago
• chroblert / JC-AntiToken
  burp插件：python版，token防重放绕过
  ☆19Updated 3 years ago
• ggg4566 / PointSearch
  备份文件快速扫描工具
  ☆24Updated last year
• liangyueliangyue / spring-core-rce
  springFramework_CVE-2022-22965_RCE简单利用
  ☆26Updated 2 years ago
• ssrsec / SpringBootEnvDecrypt
  SpringBoot获取被星号脱敏的密码的明文
  ☆57Updated 2 years ago
• JohnnyZhouX / Intranet-Hacking
  内网渗透相关总结
  ☆37Updated 2 years ago
• Weik1 / scan_screenshot
  golang写的批量对目标网站进行截图的小工具，适合目标资产比较多时，快速定位薄弱点。
  ☆32Updated last year
• r00tuser111 / SerializationDumper-Shiro
  基于SerializationDumper的Shiro Cookie序列化数据解密小工具
  ☆52Updated 4 years ago