Alternatives and similar repositories for XXEDemo

Users that are interested in XXEDemo are comparing it to the libraries listed below

• TomAPU / checkburp
  Detect burp
  ☆33Updated 4 years ago
• ldbfpiaoran / springboot-acl-bypass
  springboot getRequestURI acl bypass
  ☆37Updated 5 years ago
• samsbp / java-file-ftp
  POC for leaking java version through file and ftp protocols
  ☆24Updated 5 years ago
• cor0ps / codeql
  收集规则
  ☆30Updated 3 years ago
• LoRexxar / log_dependency_checklist
  Dependencies with Log4j2 Checklist
  ☆35Updated 4 years ago
• javasec / log4j-patch
  log4j-patch 修改字节码实现补丁防御
  ☆20Updated 4 years ago
• EvilPulsar / S2-061
  some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute
  ☆70Updated 5 years ago
• feihong-cs / jre8u20_gadget
  jre8u20 gadget
  ☆34Updated 4 years ago
• Wfzsec / ysoserial-poc
  记录调试分析ysoserial系列的学习过程，主要包含手动构造的一些poc，便于加深对漏洞和工具的理解
  ☆30Updated 5 years ago
• Dor-Tumarkin / CVE-2021-25641-Proof-of-Concept
  Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…
  ☆53Updated 4 years ago
• CHYbeta / URLFilterBypassDemo
  ☆29Updated 4 years ago
• one-iast / practice
  手把手教你写IAST系列
  ☆24Updated last year
• jas502n / fastjson-1.2.61-RCE
  fastjson-1.2.61-RCE
  ☆33Updated 6 years ago
• iSafeBlue / presentation-slides
  ☆34Updated 3 years ago
• Lhaihai / PythonPersistence
  python3 写的一些权限维持脚本
  ☆39Updated 5 years ago
• zilong3033 / XPOC
  java UI 插件化漏洞扫描工具
  ☆18Updated 5 years ago
• SecCoder-Security-Lab / spring-cloud-netflix-hystrix-dashboard-cve-2021-22053
  Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053
  ☆37Updated 3 years ago
• Maskhe / CVE-2020-15148-bypasses
  几条关于CVE-2020-15148（yii2反序列化）的绕过
  ☆75Updated 5 years ago
• Dor-Tumarkin / CVE-2019-17564-FastJson-Gadget
  Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information …
  ☆16Updated 3 years ago
• jas502n / CVE-2020-26259
  CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process…
  ☆25Updated 5 years ago
• ibey0nd / NSTScan-cli
  NST Vulnerability Scanner
  ☆18Updated 6 years ago
• z1Ro0 / tomcat_nofile_webshell
  Tomcat基于动态注册Filter的无文件Webshell
  ☆26Updated 5 years ago
• pmiaowu / RMITest
  就是一个练习RMI反序列化的最简单环境
  ☆30Updated 3 years ago
• b1ngz / spring-boot-actuator-cloud-vul
  Spring Boot Actuator + Spring Cloud Vul Env
  ☆19Updated 6 years ago
• 00theway / redis_exp
  redis 利用脚本-执行命令、文件上传、目录猜解
  ☆31Updated 8 years ago
• Dido1960 / Weblogic-CVE-2020-2551-To-Internet
  CVE-2020-2551 POC to use in Internet
  ☆21Updated 5 years ago
• UnicodeSec / Blogs
  宽字节安全团队的博客
  ☆31Updated 4 years ago
• Airboi / Citrix-ADC-RCE-CVE-2020-8193
  Citrix ADC从权限绕过到RCE
  ☆45Updated 5 years ago
• TheKingOfDuck / JNDI-Injection-Exploit
  JNDI注入测试工具改版（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,et…
  ☆49Updated 5 years ago
• threedr3am / FindClassInJars
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Updated 5 years ago