jweny / shiro-cve-2020-17523

Related projects: ⓘ

• rufherg / WebLogic_Basic_Poc
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆94Updated 3 years ago
• r00t4dm / aLIEz
  杀内存马的工具，欢迎code review，提出更好的意见
  ☆181Updated 8 months ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆233Updated 3 years ago
• TheKingOfDuck / paramFuzzer
  一款高效的参数fuzz工具|A faster param fuzzing test tool
  ☆100Updated 3 years ago
• kezibei / fastjson_payload
  ☆171Updated 2 weeks ago
• zzwlpx / weblogicPoc
  Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883 ，。。。
  ☆90Updated 2 years ago
• Y4er / yaml-payload
  Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg
  ☆128Updated 3 years ago
• 7hang / POC-EXP
  Web端POC-EXP 整理
  ☆99Updated 3 years ago
• EmYiQing / MemShell
  ☆137Updated this week
• MrMeizhi / DriedMango
  GUI Exploit Tool For RedTeam
  ☆7Updated 3 years ago
• vulhub / Apereo-CAS-Attack
  WIP: Demo for Attacking Apereo CAS
  ☆83Updated 4 years ago
• yuanhaiGreg / LandrayExploit
  ☆193Updated this week
• DSO-Lab / defvul
  DSO-Lab 漏洞研究成果整理
  ☆83Updated 2 years ago
• Veraxy00 / Shiro-EXP
  Apache Shiro 反序列化漏洞检测与利用工具，一键注入内存马
  ☆138Updated 3 years ago
• timwhitez / Frog-Auth
  🐸Unauthorized Detection Framework未授权访问检测框架
  ☆157Updated 9 months ago
• lalajun / RMIDeserialize
  RMI 反序列化环境 一步步
  ☆211Updated 4 years ago
• 1c3z / ARL-NPoC
  ☆118Updated this week
• LS95 / gopher-redis-auth
  This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。
  ☆108Updated 5 years ago
• yzddmr6 / JspForAntSword
  中国蚁剑JSP一句话Payload
  ☆117Updated 3 years ago
• depycode / fastjson-c3p0
  fastjson不出网利用、c3p0
  ☆245Updated 3 years ago
• XTeam-Wing / Hunting-Active-Directory
  个人整理的一些域渗透Tricks，可能有一些错误。
  ☆243Updated 3 years ago
• R17a-17 / JavaVulnSummary
  Java漏洞分析汇合
  ☆140Updated 2 years ago
• potats0 / javaSerializationTools
  ☆145Updated 3 years ago
• keven1z / weblogic_memshell
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆264Updated 2 years ago
• HackJava / Shiro
  《Shiro漏洞研究》
  ☆51Updated last year
• GuoKerS / Charset_encoding-Burp
  利用字符集编码绕过waf的burpsuite插件
  ☆116Updated 3 years ago
• flowerwind / JspFinder
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆174Updated 2 years ago
• jas502n / OA-Seeyou
  ☆124Updated this week
• safesword / WebExp
  2020年~2021年 网站CMS、中间件、框架系统漏洞集合
  ☆98Updated 3 years ago
• longofo / PaddingOracleAttack-Shiro-721
  Shiro-721 Padding Oracle Attack
  ☆68Updated 3 years ago