在ShiroAttack2基础上增加 Header 长度绕过、分块、短 Payload等功能
☆101Apr 14, 2026Updated 5 months ago
Alternatives and similar repositories for ShiroAttack2_bypass
Users that are interested in ShiroAttack2_bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LingXiLabs是凌曦安全团队依托攻防实战经验与SRC漏洞挖掘经验打造的漏洞靶场集合，以“锤炼攻防技能、赋能漏洞挖掘”为核心，免费为网络安全爱好者、从业人员供练习环境。☆49Mar 14, 2026Updated 6 months ago
- Shiro反序列化漏洞一站式综合利用工具☆172Jan 22, 2026Updated 8 months ago
- SQLMap-FluX 是针对sql注入的改造版本。本项目核心在于通过重构工具的静态特征、逻辑载荷以及交互行为，使其能够模拟拟人化的访问模式，从而在渗透测试中，有效检测并绕过现代Web应用防火墙的特征识别与频率检测。☆46Mar 11, 2026Updated 6 months ago
- APIKit 是Burp Suite 的一个API接口扫描插件，该版本APIKit是对API-Security项目的APIKit1.0进行的二开，增加了扫描开关，避免直接打开burp乱扫被抓起来☆107Dec 19, 2025Updated 9 months ago
- 一款针对K8s综合利用GUI工具☆185Apr 26, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JeecgBoot Go版本综合漏洞检测工具☆105Feb 24, 2026Updated 7 months ago
- 幽狼AI Shell：首款支持AI渗透的 高级WebShell & C2管理工具，内置WebShell MCP服务器，支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，Shell…☆275Aug 16, 2026Updated last month
- TongWebExploit 是一款面向 TongWeb 反序列化漏洞场景的图形化检测与利用工具，支持漏洞探测、命令回显、EL 表达式执行、内存马注入和批量检测。☆51Jun 20, 2026Updated 3 months ago
- Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-…☆83Jun 27, 2026Updated 3 months ago
- burpsuit插件，解析swagger/openapi接口文档并进行请求，模拟参数方便渗透测试人员快速发现可用接口 (最新使用源码编译，release有时候没空搞)☆46Oct 23, 2025Updated 11 months ago
- ☆121Jun 17, 2026Updated 3 months ago
- 基于 Y4er/ysoserial 与 marshalsec 的 Java 反序列化利用 GUI 工具，集成 Payload 生成、JNDI Reference、LDAP 反序列化与调用图编辑。☆46May 5, 2026Updated 4 months ago
- 一款用于网页敏感信息检测，指纹识别的chrome插件☆929Aug 10, 2026Updated last month
- 由ABC_123编写的Web日志分析工具☆159Jun 28, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆56Sep 3, 2026Updated 3 weeks ago
- 综合后渗透方面的杂烩☆602Mar 1, 2026Updated 6 months ago
- ☆50Jul 30, 2026Updated last month
- MPET (Multi-Protocol Exploitation Toolkit) 是一款专业的多协议安全测试工具，基于 Wails 框架构建的现代化桌面应用。它提供了对 25+ 种主流服务协议的连接测试、未授权访问检测、弱口令检测和漏洞利用能力，是安全研究人员和渗透测试…☆225Jan 22, 2026Updated 8 months ago
- 后渗透信息/密码/凭证收集工具☆312May 7, 2025Updated last year
- ☆126Dec 16, 2025Updated 9 months ago
- xxl-job漏洞综合利用工具☆158Jun 3, 2025Updated last year
- 对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改☆24Apr 19, 2022Updated 4 years ago
- Nacos 综合漏洞利用工具☆692Sep 8, 2026Updated 2 weeks ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆1,027Jun 16, 2026Updated 3 months ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆573Sep 12, 2026Updated 2 weeks ago
- 哥斯拉Godzilla定制化插件，接收恶意类Base64编码与恶意类类名进行实例化，达到注入任意类型内存马的目的。☆52Dec 30, 2025Updated 8 months ago
- Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术…☆254Aug 16, 2026Updated last month
- FastjsonScan4Burp 一款基于burp被动扫描的fastjson漏洞探测插件，可针对数据包中存在json的参数或请求体进行payload测试。旨在帮助安全人员更加便捷的发现、探测、深入利用fastjson漏洞，目前已实现fastjson探测、版本、依赖探测、出…☆172Mar 13, 2025Updated last year
- api接口测试工具,包括swagger文档，asp接口文档,wsdl接口,wadl接口,一键自动跑接口☆179Mar 30, 2026Updated 5 months ago
- Burpsuite存储桶配置不当漏洞检测插件☆197Jul 16, 2025Updated last year
- java-agent内存马一键注入服务器维权工具，支持自定义路径、校验和内存马内容。☆150Aug 26, 2026Updated last month
- Shiro漏洞利用工具☆157Jan 12, 2026Updated 8 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 浏览器存储桶配置漏洞检测插件☆277Nov 27, 2025Updated 10 months ago
- ☆45Sep 8, 2025Updated last year
- ☆76Sep 10, 2025Updated last year
- ☆268Mar 31, 2026Updated 5 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆403Mar 25, 2026Updated 6 months ago
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆123Jul 30, 2026Updated last month
- GodzillaNodeJsPayload☆170Dec 10, 2025Updated 9 months ago