Alternatives and similar repositories for jolokia-exploitation-toolkit

Users that are interested in jolokia-exploitation-toolkit are comparing it to the libraries listed below

• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆438Sep 10, 2021Updated 4 years ago
• qtc-de / remote-method-guesser

  View on GitHub
  Java RMI Vulnerability Scanner
  ☆914Jul 3, 2024Updated last year
• phith0n / zkar

  View on GitHub
  ZKar is a Java serialization protocol analysis tool implement in Go.
  ☆643Feb 15, 2025Updated last year
• qtc-de / beanshooter

  View on GitHub
  JMX enumeration and attacking tool.
  ☆494Jun 26, 2025Updated 7 months ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆753Apr 14, 2021Updated 4 years ago
• BishopFox / GadgetProbe

  View on GitHub
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆613Mar 4, 2021Updated 4 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,015Oct 15, 2020Updated 5 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆258Oct 14, 2020Updated 5 years ago
• A-D-Team / attackRmi

  View on GitHub
  ☆232Jan 3, 2022Updated 4 years ago
• BeichenDream / Chunk-Proxy

  View on GitHub
  ☆294May 7, 2022Updated 3 years ago
• cckuailong / JNDI-Injection-Exploit-Plus

  View on GitHub
  80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…
  ☆866Jun 24, 2024Updated last year
• veracode-research / rogue-jndi

  View on GitHub
  A malicious LDAP server for JNDI injection attacks
  ☆1,076Sep 28, 2023Updated 2 years ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆451Jun 19, 2024Updated last year
• zema1 / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆357Sep 20, 2022Updated 3 years ago
• f0ng / JavaFileDict

  View on GitHub
  Java应用的一些配置文件字典，来源于公开的字典与平时收集
  ☆321Feb 1, 2024Updated 2 years ago
• JamesCooteUK / SharpSphere

  View on GitHub
  .NET Project for Attacking vCenter
  ☆553Nov 11, 2021Updated 4 years ago
• yzddmr6 / Java-Js-Engine-Payloads

  View on GitHub
  Java Js Engine Payloads All in one
  ☆289Aug 21, 2023Updated 2 years ago
• threedr3am / ZhouYu

  View on GitHub
  （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）
  ☆615Dec 29, 2021Updated 4 years ago
• Hutt0n0 / ActiveMqRCE

  View on GitHub
  用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入
  ☆288Nov 20, 2023Updated 2 years ago
• depycode / fastjson-c3p0

  View on GitHub
  fastjson不出网利用、c3p0
  ☆255Jul 30, 2021Updated 4 years ago
• feihong-cs / memShell

  View on GitHub
  FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
  ☆382Nov 6, 2020Updated 5 years ago
• rmb122 / rogue_mysql_server

  View on GitHub
  A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.
  ☆754Dec 2, 2022Updated 3 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,239Feb 17, 2025Updated last year
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆822Sep 23, 2022Updated 3 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,404Jan 18, 2022Updated 4 years ago
• zcgonvh / EfsPotato

  View on GitHub
  Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).
  ☆817Dec 14, 2023Updated 2 years ago
• pyn3rd / Spring-Boot-Vulnerability

  View on GitHub
  ☆419Jan 5, 2022Updated 4 years ago
• BeichenDream / Kcon2021Code

  View on GitHub
  ☆274Oct 28, 2021Updated 4 years ago
• luelueking / Deserial_Sink_With_JDBC

  View on GitHub
  Some ReadObject Sink With JDBC
  ☆243May 8, 2024Updated last year
• Ppsoft1991 / CodeReviewTools

  View on GitHub
  通过正则搜索、批量反编译特定Jar包中的class名称
  ☆320Dec 9, 2021Updated 4 years ago
• LandGrey / copagent

  View on GitHub
  java memory web shell extracting tool
  ☆497May 17, 2021Updated 4 years ago
• 5wimming / gadgetinspector

  View on GitHub
  利用链、漏洞检测工具
  ☆373Jul 31, 2024Updated last year
• kezibei / Urldns

  View on GitHub
  ☆341Oct 11, 2025Updated 4 months ago
• RicterZ / PySharpSphere

  View on GitHub
  Yet another SharpSphere
  ☆227Aug 1, 2021Updated 4 years ago
• fynch3r / Gadgets

  View on GitHub
  Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。
  ☆420Dec 3, 2021Updated 4 years ago
• BeichenDream / GodzillaMemoryShellProject

  View on GitHub
  ☆306Feb 27, 2025Updated 11 months ago
• l0ggg / VMware_vCenter

  View on GitHub
  VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS
  ☆219Dec 1, 2021Updated 4 years ago
• l3yx / jdwp-codeifier

  View on GitHub
  基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）
  ☆321Dec 22, 2024Updated last year
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆835Jun 7, 2022Updated 3 years ago