jweny / shiro-cve-2020-17523
shiro-cve-2020-17523 漏洞的两种绕过姿势分析 以及配套的漏洞环境
☆114Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for shiro-cve-2020-17523
- 用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库☆94Updated 4 years ago
- SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE☆232Updated 3 years ago
- DSO-Lab 漏洞研究成果整理☆83Updated 2 years ago
- shiro反序列化批量ip快速检测脚本☆78Updated 4 years ago
- 一款高效的参数fuzz工具|A faster param fuzzing test tool☆99Updated 4 years ago
- fastjson不出网利用、c3p0☆246Updated 3 years ago
- GUI Exploit Tool For RedTeam☆7Updated 3 years ago
- This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。☆110Updated 5 years ago
- Web端POC-EXP 整理☆99Updated 3 years ago
- Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883 ，。。。☆90Updated 2 years ago
- WIP: Demo for Attacking Apereo CAS☆85Updated 4 years ago
- xxl-job未授权命令执行☆102Updated 2 years ago
- Apache Shiro 反序列化漏洞检测与利用工具，一键注入内存马☆139Updated 3 years ago
- 利用字符集编码绕过waf的burpsuite插件☆116Updated 3 years ago
- 针对 403 页面的 fuzz 脚本☆124Updated 2 years ago
- Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg☆130Updated 4 years ago
- burp-http请求转发至其他模块的插件☆76Updated 4 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆101Updated 4 years ago
- Shiro-721 Padding Oracle Attack☆70Updated 3 years ago
- 解密weblogic AES或DES加密方法☆225Updated 3 years ago
- 《Shiro漏洞研究》☆53Updated last year
- 2020年~2021年 网站CMS、中间件、框架系统漏洞集合☆99Updated 3 years ago
- woodpecker框架weblogic信息探测插件☆179Updated 2 years ago
- ☆100Updated 2 years ago
- Add or Delete User via windows api，it can be used when .net is inaccessible.☆38Updated 4 years ago