jiansiting / CVE-2019-2725

Related projects: ⓘ

• jas502n / SHIRO-550
  Shiro RememberMe 1.2.4 反序列化 漏洞
  ☆52Updated 4 years ago
• justforfunya / Axis-1.4-RCE-Poc
  ☆148Updated this week
• 21superman / Hessian-Deserialize-RCE
  ☆97Updated this week
• shengqi158 / Jackson-databind-RCE-PoC
  ☆80Updated 6 years ago
• undefinedsec / HaE-Java
  ☆28Updated this week
• wyzxxz / Apache_Solr_RCE_via_Velocity_template
  ☆58Updated this week
• gh0stkey / SubDReporter
  ☆53Updated this week
• jas502n / CVE-2019-2888
  WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)
  ☆58Updated 4 years ago
• jas502n / SHIRO-721
  RememberMe Padding Oracle Vulnerability RCE
  ☆71Updated 4 years ago
• Qclover / jsspider
  A js infomation dig tool.
  ☆68Updated 4 years ago
• guimaizi / testing_wave
  ☆58Updated 4 years ago
• Ch1ngg / CaidaoMitmProxy
  基于HTTP代理中转菜刀过WAF
  ☆63Updated 5 years ago
• myzing00 / Vulnerability-analysis
  Vulnerability-analysis Poc、python shell
  ☆58Updated 4 years ago
• jas502n / fastjson-1.2.58-rce
  fastjson-1.2.58-rce with h2 database
  ☆33Updated 5 years ago
• qianl0ng / CVE-2018-2893
  可以直接反弹shell
  ☆47Updated last year
• EdwardChristmas / Shiro_exploit
  Apache Shiro Java Analysis and Utilization of Deserialization Vulnerabilities
  ☆39Updated 4 years ago
• 21superman / weblogic_cve-2019-2888
  ☆37Updated this week
• aRe00t / rce-over-spark
  Remote Command Execution Over Spark
  ☆96Updated 6 years ago
• FiveAourThe / sqlmap_api_demo
  sqlmap_api_demo
  ☆24Updated 5 years ago
• gh0stkey / BurpSuite-Extender-MarkInfo
  ☆119Updated this week
• fuhei / CNVD-C-2019-48814
  CNVD-C-2019-48814 Weblogic wls9_async_response 反序列化利用工具
  ☆38Updated 5 years ago
• she11c0der / fenghuangscanner
  ☆20Updated 7 years ago
• uknowsec / BurpSuite-Extender-fastjson
  Reference：https://www.w2n1ck.com/article/44/
  ☆151Updated 4 years ago
• iceMatcha / Shiro_721_Padding_Oracle_RCE
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆68Updated 4 years ago
• rabbitmask / WeblogicScanServer
  开启WeblogicScanV3.*系列，采用Server部署，支持远程Weblogic漏洞扫描
  ☆55Updated 4 years ago
• r35tart / RedisDirScan
  此脚本用于测试 Rdies 未授权访问，在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下，进行WEB目录探测
  ☆73Updated 5 years ago
• JE2Se / Async_Exp
  异步并发通用工具，主要发现异步并发漏洞。如短信炸弹发送间隔限制突破等等~
  ☆26Updated 4 years ago
• wuppp / shiro_rce_exp
  Shiro RCE (Padding Oracle Attack)
  ☆142Updated 4 years ago
• 3xp10it / xupload
  A tool for automatically testing whether the upload function can upload webshell
  ☆54Updated 4 years ago