leihehehe/Java-deserialization-vulnerability external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

leihehehe/Java-deserialization-vulnerability

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/leihehehe/Java-deserialization-vulnerability)

Close

leihehehe / Java-deserialization-vulnerabilityView on GitHubMore

• External links
• Readme badge

Personal notes for Java Deserialization Vulnerability. 对应Java反序列化漏洞利用链集合详解、个人笔记

☆18Jan 10, 2022Updated 4 years ago

Alternatives and similar repositories for Java-deserialization-vulnerability

Users that are interested in Java-deserialization-vulnerability are comparing it to the libraries listed below

• 0ps / pocassistdb

  View on GitHub
  database of pocassist（漏洞库）
  ☆16Jun 16, 2021Updated 4 years ago
• Paper-Pen / redteam-tips

  View on GitHub
  关于红队方面的学习资料
  ☆16Dec 15, 2019Updated 6 years ago
• ax1sX / Automation-in-Java-Security

  View on GitHub
  ☆10Jul 21, 2022Updated 3 years ago
• Roboterh / study_summary

  View on GitHub
  study_summary
  ☆10Aug 8, 2022Updated 3 years ago
• luckyfuture0177 / ReZeroIntranet

  View on GitHub
  从零开始的内网渗透学习记录
  ☆12Mar 25, 2022Updated 3 years ago
• m01e-40x / rmi-attack-demo

  View on GitHub
  在学习Java反序列化漏洞的过程中，用来理解Java RMI程序的执行流程，演示如何攻击Java RMI程序的几个示例。
  ☆11May 6, 2020Updated 5 years ago
• w0x68y / initUbuntu

  View on GitHub
  参考国外巨佬思路，自己写一个为渗透测试初始化ubuntu虚拟机的bash脚本
  ☆16Oct 13, 2025Updated 4 months ago
• AV1080p / checkSql

  View on GitHub
  ☆11Nov 7, 2016Updated 9 years ago
• cckuailong / nginx_vultarget

  View on GitHub
  ☆13Feb 9, 2022Updated 4 years ago
• 16778738 / hk_learn

  View on GitHub
  渗透测试学习笔记
  ☆14Jul 9, 2022Updated 3 years ago
• ethicalhackingplayground / bcaem

  View on GitHub
  Fast AEM scope gathering tool for all your public and private BugCrowd Programs
  ☆10Jul 14, 2021Updated 4 years ago
• evilAdan0s / Cobalt-Strike-Develop-Note

  View on GitHub
  Cobalt Strike二次开发笔记，记录功能和思路
  ☆16Jul 9, 2022Updated 3 years ago
• cn-panda / ThymeleafSSTIBypass

  View on GitHub
  Thymeleaf SSTI Bypass
  ☆13Nov 24, 2021Updated 4 years ago
• Q4n / SuperPriv

  View on GitHub
  从admin冲到TrustedInstaller
  ☆17Feb 3, 2023Updated 3 years ago
• safe6Sec / JavaDeserialization

  View on GitHub
  java反序列化学习笔记
  ☆16Nov 17, 2021Updated 4 years ago
• l3yx / javaDeserializeNotes

  View on GitHub
  Java反序列化漏洞学习笔记
  ☆16Nov 17, 2019Updated 6 years ago
• bravery9 / weblogic_exploit

  View on GitHub
  weblogic漏洞利用工具
  ☆18Jul 16, 2020Updated 5 years ago
• cream-sec / JSPHorse

  View on GitHub
  结合反射调用、动态编译、BCEL、defineClass0，ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具
  ☆19Dec 16, 2021Updated 4 years ago
• h4fan / ssrfscan

  View on GitHub
  Burp Extender, ssrf scanner, 自动扫描ssrf漏洞
  ☆46Mar 31, 2021Updated 4 years ago
• ImuSpirit / ThinkPHP_RCE

  View on GitHub
  一款综合漏洞利用工具箱。
  ☆51Jun 15, 2022Updated 3 years ago
• jax7sec / EmailCollect

  View on GitHub
  帮助红队收集目标企业员工的邮箱信息，借助必应搜索引擎爬取邮箱。
  ☆25Apr 26, 2022Updated 3 years ago
• sherlocksecurity / Microsoft-CVE-2022-26809-The-Little-Boy

  View on GitHub
  The poc for CVE-2022-26809 RCE via RPC will be updated here.
  ☆20Apr 18, 2022Updated 3 years ago
• Whoopsunix / fastjson_study

  View on GitHub
  Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul
  ☆96Oct 30, 2023Updated 2 years ago
• PetrusViet / CVE-2021-39115

  View on GitHub
  Template Injection in Email Templates leads to code execution on Jira Service Management Server
  ☆48Sep 9, 2021Updated 4 years ago
• Ernket / shepherd

  View on GitHub
  将fofa quake zoomeye hunter等空间测绘聚合的小工具
  ☆23Aug 13, 2023Updated 2 years ago
• langu-xyz / ASScan

  View on GitHub
  Hello, Attack Surface Scan, BurpSuite完全被动扫描插件，不主动发送任何请求，适合挂机使用。
  ☆24Jul 10, 2022Updated 3 years ago
• b1ank1108 / bypassAV

  View on GitHub
  破产版免杀
  ☆52Oct 2, 2021Updated 4 years ago
• OneSourceCat / XxlJob-Hessian-RCE

  View on GitHub
  XxlJob<=2.1.2配置不当情况下反序列化RCE
  ☆120Nov 2, 2020Updated 5 years ago
• hifuck / Security_Code

  View on GitHub
  个人安全开发代码汇总：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档
  ☆53Jul 19, 2019Updated 6 years ago
• guguyu1 / IDOR-bypass-fuzz

  View on GitHub
  IDOR bypass fuzz 权限绕过burp 插件 fuzz （shiro 等）
  ☆27Sep 1, 2021Updated 4 years ago
• r0eXpeR / File-Download-Generator

  View on GitHub
  文件下载命令快捷生成器,单文件版
  ☆32Mar 30, 2021Updated 4 years ago
• boy-hack / shiyanlouscan

  View on GitHub
  w8ayScan扫描器 实验楼版本
  ☆23Mar 21, 2017Updated 8 years ago
• sharathkramadas / k8s-nuclei-templates

  View on GitHub
  Nuclei templates for K8S security scanning
  ☆101Dec 2, 2021Updated 4 years ago
• bewhale / CVE-2022-22954

  View on GitHub
  CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本、文件写入
  ☆70Apr 26, 2022Updated 3 years ago
• pyroxenites / SpringScan

  View on GitHub
  spring框架漏洞扫描
  ☆103Jan 4, 2022Updated 4 years ago
• j2ekim / Security_Service_Interviews

  View on GitHub
  安服面经☞渗透测试/代码审计/安全研究
  ☆28May 3, 2022Updated 3 years ago
• sechacking / DOMXSSHilight

  View on GitHub
  Burp Extension in Python hilighting DOM Sinks and Hosts using DOM XSS Wiki regex
  ☆24Aug 28, 2013Updated 12 years ago
• webraybtl / codeql

  View on GitHub
  codeqlpy
  ☆28Jul 6, 2023Updated 2 years ago
• rambleZzz / jmxbfGUI

  View on GitHub
  jmx未授权访问 弱口令批量检测 GUI工具
  ☆31Apr 28, 2023Updated 2 years ago