Alternatives and similar repositories for Spel-research

Users that are interested in Spel-research are comparing it to the libraries listed below

• Avento / MemShell4Spring

  View on GitHub
  Memory Webshell for Spring Web - 适用于 Spring Web 的内存马
  ☆25Jan 18, 2024Updated 2 years ago
• Enokiy / cve-2022-22947-spring-cloud-gateway

  View on GitHub
  ☆17Apr 7, 2022Updated 3 years ago
• aaaademo / Confluence-EvilJar

  View on GitHub
  配合 CVE-2023-22515 后台上传jar包实现RCE
  ☆23Nov 9, 2023Updated 2 years ago
• 1ucky7 / HessianPoc_Generator-0.1.1

  View on GitHub
  woodpecker插件生成hessian利用payload
  ☆20Sep 19, 2023Updated 2 years ago
• d0ub1ec0d3 / SharpEmailC2

  View on GitHub
  ☆18Nov 23, 2023Updated 2 years ago
• S9MF / ShiroScan2

  View on GitHub
  基于BurpShiroPassiveScan修改增加了Xray回显链生成
  ☆56Sep 6, 2022Updated 3 years ago
• freeFV / ShortPayload

  View on GitHub
  如何将Java反序列化Payload极致缩小
  ☆69Jan 18, 2022Updated 4 years ago
• ax1sX / SpringSecurity

  View on GitHub
  A list for Spring Security
  ☆128Jan 16, 2024Updated 2 years ago
• minhangxiaohui / JAVA_memshells

  View on GitHub
  java 内存马系列 实现（Servlets 、组件、Agent）
  ☆10Mar 7, 2022Updated 3 years ago
• minhangxiaohui / JavaAgentMemshell

  View on GitHub
  JavaAgent内存马实现、检测、修复demo
  ☆11Dec 7, 2022Updated 3 years ago
• TryGOTry / Debug-Nps

  View on GitHub
  在原版nps的基础上，增加了nps探测，以及对应的利用方式（如获取cookie，页面等），进行一些简单的二开。未经过大量测试，可能存在bug。
  ☆21Aug 5, 2025Updated 6 months ago
• ax1sX / Automation-in-Java-Security

  View on GitHub
  ☆10Jul 21, 2022Updated 3 years ago
• Boogipop / Netty-WebFlux-Memshell

  View on GitHub
  Netty/WebFlux 内存马
  ☆26Nov 19, 2023Updated 2 years ago
• Esonhugh / yapi-rce-webshell

  View on GitHub
  Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小
  ☆66Jul 4, 2024Updated last year
• KpLi0rn / ysoserial

  View on GitHub
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Sep 14, 2021Updated 4 years ago
• kyo-w / router-router

  View on GitHub
  Java web路由内存分析工具
  ☆437May 22, 2025Updated 8 months ago
• shanxigetanxiaochou / burp-xss-scan

  View on GitHub
  burp被动插件扫反射xss
  ☆14Nov 29, 2023Updated 2 years ago
• PortSwigger / example-event-listeners

  View on GitHub
  ☆15Dec 1, 2023Updated 2 years ago
• Scorpio-m7 / tomcat-backdoor

  View on GitHub
  ☆55Dec 29, 2021Updated 4 years ago
• aaaademo / ysuserial-mod

  View on GitHub
  ☆30Dec 6, 2024Updated last year
• Y4Sec-Team / mysql-jdbc-tricks

  View on GitHub
  JDBC Attack Tricks
  ☆154Sep 3, 2023Updated 2 years ago
• jas502n / OpenFire_Decrypt

  View on GitHub
  OpenFire 管理后台账号密码解密
  ☆30Dec 15, 2020Updated 5 years ago
• somatrasss / weblogic2021

  View on GitHub
  CVE-2021-1994、CVE-2021-2047、CVE-2021-2064、CVE-2021-2108、CVE-2021-2075、CVE-2019-17195、CVE-2020-14756、CVE-2021-2109
  ☆12Sep 13, 2021Updated 4 years ago
• chudyPB / XStream-Gadgets

  View on GitHub
  Several XStream gadgets ported from ysoserial
  ☆33Sep 26, 2021Updated 4 years ago
• dk47os3r / SpringMemShell

  View on GitHub
  Spring内存马检测和隐形马研究
  ☆13Nov 28, 2021Updated 4 years ago
• safe6Sec / codeql-grafana

  View on GitHub
  用codeql分析grafana最新任意文件读取
  ☆11Dec 10, 2021Updated 4 years ago
• blipzip / cve-2022-31692

  View on GitHub
  A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692
  ☆35Nov 7, 2022Updated 3 years ago
• W01fh4cker / MemshellKit

  View on GitHub
  针对多个框架的高度自定义的内存马一键打入工具 | A highly customized memory shell one-click injection tool for multiple frameworks
  ☆49Feb 6, 2024Updated 2 years ago
• AIex-3 / confluence-hack

  View on GitHub
  CVE-2023-22515
  ☆52Nov 10, 2023Updated 2 years ago
• passer-W / snakeyaml-memshell

  View on GitHub
  springboot跨线程注入内存马
  ☆123Apr 10, 2022Updated 3 years ago
• cn-panda / ThymeleafSSTIBypass

  View on GitHub
  Thymeleaf SSTI Bypass
  ☆13Nov 24, 2021Updated 4 years ago
• jvm-rasp / jrasp-agent

  View on GitHub
  专注于JVM的运行时防御系统RASP
  ☆295Jun 14, 2024Updated last year
• Esonhugh / SpringCloudHeapdump

  View on GitHub
  anonymous to cluster-admin via Heapdump.
  ☆30Nov 16, 2023Updated 2 years ago
• BeichenDream / GodzillaMemoryShellProject

  View on GitHub
  ☆306Feb 27, 2025Updated 11 months ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆438Sep 10, 2021Updated 4 years ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆93Jan 17, 2023Updated 3 years ago
• triplexlove / javasocket

  View on GitHub
  java实现反序列化建立socket连接
  ☆60Dec 27, 2024Updated last year
• kN6jq / WoodpeckerPluginManager

  View on GitHub
  Woodpecker模板项目,方便创建新插件
  ☆14Jul 25, 2024Updated last year
• Drac0nids / FineReportExploit

  View on GitHub
  基于go语言的帆软报表漏洞检测工具
  ☆14Sep 4, 2022Updated 3 years ago