Alternatives and similar repositories for springboot-shiro:

Users that are interested in springboot-shiro are comparing it to the libraries listed below

• EvilPulsar / S2-061
  some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute
  ☆69Updated 4 years ago
• codeplutos / Conference
  ☆28Updated 5 years ago
• jas502n / CVE-2020-26259
  CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process…
  ☆25Updated 4 years ago
• MagicZer0 / Jackson_RCE-CVE-2019-12384
  CVE-2019-12384 漏洞测试环境
  ☆20Updated 2 years ago
• UnicodeSec / Blogs
  宽字节安全团队的博客
  ☆30Updated 3 years ago
• Dor-Tumarkin / CVE-2019-17564-FastJson-Gadget
  Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information …
  ☆16Updated 2 years ago
• c0ny1 / burp-cookie-porter
  一个可快速“搬运”cookie的Burp Suite插件
  ☆25Updated 6 years ago
• ldbfpiaoran / springboot-acl-bypass
  springboot getRequestURI acl bypass
  ☆37Updated 4 years ago
• javasec / log4j-patch
  log4j-patch 修改字节码实现补丁防御
  ☆20Updated 3 years ago
• threedr3am / fastjson-blacklist
  打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
  ☆32Updated 5 years ago
• feihong-cs / jre8u20_gadget
  jre8u20 gadget
  ☆33Updated 3 years ago
• samsbp / java-file-ftp
  POC for leaking java version through file and ftp protocols
  ☆24Updated 4 years ago
• Dor-Tumarkin / CVE-2021-25641-Proof-of-Concept
  Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…
  ☆52Updated 3 years ago
• jas502n / fastjson-1.2.61-RCE
  fastjson-1.2.61-RCE
  ☆33Updated 5 years ago
• threedr3am / FindClassInJars
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Updated 4 years ago
• jas502n / fastjson-1.2.60-rce
  autoType enable
  ☆36Updated 5 years ago
• aboutbo / tools
  ☆19Updated 4 years ago
• Dido1960 / Weblogic-CVE-2020-2551-To-Internet
  CVE-2020-2551 POC to use in Internet
  ☆21Updated 4 years ago
• z1Ro0 / tomcat_nofile_webshell
  Tomcat基于动态注册Filter的无文件Webshell
  ☆26Updated 4 years ago
• Ramos-dev / R9000
  ☆58Updated 4 years ago
• fairyming / CVE-2020-8840
  CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞
  ☆35Updated 4 years ago
• LuckyC4t / shiro-urldns
  shiro反序列化检测(只是个玩具23333)
  ☆9Updated last year
• 1135 / Kong_exploit
  ☆41Updated 4 years ago
• SecCoder-Security-Lab / spring-cloud-netflix-hystrix-dashboard-cve-2021-22053
  Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053
  ☆37Updated 2 years ago
• b1ngz / spring-boot-actuator-cloud-vul
  Spring Boot Actuator + Spring Cloud Vul Env
  ☆19Updated 5 years ago
• gorgiaxx / reGeorg
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
  ☆20Updated 6 years ago
• JulianWu520 / ysoserial-mangguogan
  ☆4Updated 4 years ago
• woodpecker-appstore / rmi-deserialization-vuldb
  Java RMI反序列化漏洞插件
  ☆47Updated 3 years ago
• mogwailabs / deserialization-filter-blacklists
  Native Java serialization filter blacklist for common gadgets
  ☆20Updated 5 years ago
• jas502n / zentao
  zentao Getshell
  ☆10Updated 4 years ago