☆95Sep 2, 2024Updated last year
Alternatives and similar repositories for php-filter-iconv
Users that are interested in php-filter-iconv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- exec BashCommand with only ! # $ ' ( ) < \ { } just 10 charset used in Bypass or CTF☆265Aug 14, 2024Updated last year
- sql盲注日志分析工具GUI版本☆16Feb 17, 2024Updated 2 years ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆140Mar 11, 2024Updated 2 years ago
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated last year
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆573Feb 4, 2026Updated last month
- A lightweight port-forwarding and socks proxy tool written in Rust 🦀☆52Jan 13, 2026Updated 2 months ago
- 无需文件落地Agent内存马生成器☆249May 30, 2024Updated last year
- A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.☆325Jun 2, 2024Updated last year
- 用于自动搜索 Python 沙箱逃逸、SSTI 攻击链的小工具☆38Jan 22, 2025Updated last year
- Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()☆504Sep 30, 2024Updated last year
- 专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF☆1,250Updated this week
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆282Dec 13, 2024Updated last year
- 入侵痕迹清理/Cleaning up traces of intrusion☆244Nov 6, 2024Updated last year
- 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY …☆827Sep 18, 2023Updated 2 years ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆176Apr 17, 2024Updated last year
- 基于多种策略, 对已有 JAR 包中的全限定类名进行变换, 无限生成高度相似的虚假类名☆18Jul 30, 2025Updated 7 months ago
- Python内存马管理工具 Python MemShell☆91Jun 18, 2024Updated last year
- Java Vulnerability Exploitation Platform☆2,010Updated this week
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆572Feb 7, 2026Updated last month
- Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.☆237Oct 8, 2024Updated last year
- ☆24Apr 4, 2025Updated 11 months ago
- 通过端口复用直接进行正向socks5代理（非防火墙分流）☆114Dec 17, 2024Updated last year
- CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现☆39Jul 16, 2025Updated 8 months ago
- 使用Docker一键制作vol3取证需要的的SymbolTables☆12Aug 31, 2025Updated 6 months ago
- MDUT-Extend(扩展版本)☆849Mar 17, 2026Updated last week
- rce☆139Jun 15, 2023Updated 2 years ago
- memory-shell for hook tcp connection and impl origin socks5 proxy☆43Aug 5, 2025Updated 7 months ago
- java-web 自动化鉴权绕过☆379Apr 3, 2025Updated 11 months ago
- Jar Analyzer - 一个 JAR 包 GUI 分析工具，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索，紧跟 AI 技术发…☆1,948Updated this week
- JNDIExploit or a ysoserial.☆1,744Dec 31, 2025Updated 2 months ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆552Dec 7, 2025Updated 3 months ago
- ☆12Jan 3, 2026Updated 2 months ago
- 一个简单的批量反编译jar包的小脚本☆45Mar 20, 2022Updated 4 years ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,355Mar 4, 2026Updated 2 weeks ago
- ☆79Nov 22, 2024Updated last year
- 高版本Fastjson在Java原生反序列化中的利用演示☆26Jan 12, 2025Updated last year
- Netty/WebFlux 内存马☆26Nov 19, 2023Updated 2 years ago
- "chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability ru…☆484Feb 1, 2026Updated last month
- No One（无名）：Next Generation Polyglot Website Manager☆76Mar 17, 2026Updated last week