在ShiroAttack2基础上增加 Header 长度绕过、分块、短 Payload等功能
☆97Apr 14, 2026Updated 3 months ago
Alternatives and similar repositories for ShiroAttack2_bypass
Users that are interested in ShiroAttack2_bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LingXiLabs是凌曦安全团队依托攻防实战经验与SRC漏洞挖掘经验打造的漏洞靶场集合，以“锤炼攻防技能、赋能漏洞挖掘”为核心，免费为网络安全爱好者、从业人员供练习环境。☆47Mar 14, 2026Updated 4 months ago
- Shiro反序列化漏洞一站式综合利用工具☆173Jan 22, 2026Updated 6 months ago
- SQLMap-FluX 是针对sql注入的改造版本。本项目核心在于通过重构工具的静态特征、逻辑载荷以及交互行为，使其能够模拟拟人化的访问模式，从而在渗透测试中，有效检测并绕过现代Web应用防火墙的特征识别与频率检测。☆47Mar 11, 2026Updated 4 months ago
- APIKit 是Burp Suite 的一个API接口扫描插件，该版本APIKit是对API-Security项目的APIKit1.0进行的二开，增加了扫描开关，避免直接打开burp乱扫被抓起来☆106Dec 19, 2025Updated 7 months ago
- 一款针对K8s综合利用GUI工具☆165Apr 26, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- JeecgBoot Go版本综合漏洞检测工具☆102Feb 24, 2026Updated 5 months ago
- 幽狼AI Shell：首款支持AI渗透的高级WebShell & C2管理工具，内置WebShell MCP服务器，支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，Shell…☆250Jul 17, 2026Updated last week
- TongWebExploit 是一款面向 TongWeb 反序列化漏洞场景的图形化检测与利用工具，支持漏洞探测、命令回显、EL 表达式执行、内存马注入和批量检测。☆41Jun 20, 2026Updated last month
- Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-…☆83Jun 27, 2026Updated last month
- burpsuit插件，解析swagger/openapi接口文档并进行请求，模拟参数方便渗透测试人员快速发现可用接口 (最新使用源码编译，release有时候没空搞)☆46Oct 23, 2025Updated 9 months ago
- ☆118Jun 17, 2026Updated last month
- 基于 Y4er/ysoserial 与 marshalsec 的 Java 反序列化利用 GUI 工具，集成 Payload 生成、JNDI Reference、LDAP 反序列化与调用图编辑。☆44May 5, 2026Updated 2 months ago
- 一款用于网页敏感信息检测，指纹识别的chrome插件☆891Jan 13, 2026Updated 6 months ago
- 由ABC_123编写的Web日志分析工具☆154Jun 28, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 综合后渗透方面的杂烩☆599Mar 1, 2026Updated 4 months ago
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆49Updated this week
- 后渗透信息/密码/凭证收集工具☆305May 7, 2025Updated last year
- MPET (Multi-Protocol Exploitation Toolkit) 是一款专业的多协议安全测试工具，基于 Wails 框架构建的现代化桌面应用。它提供了对 25+ 种主流服务协议的连接测试、未授权访问检测、弱口令检测和漏洞利用能力，是安全研究人员和渗透测试…☆217Jan 22, 2026Updated 6 months ago
- ☆127Dec 16, 2025Updated 7 months ago
- xxl-job漏洞综合利用工具☆160Jun 3, 2025Updated last year
- 对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改☆24Apr 19, 2022Updated 4 years ago
- Nacos 综合漏洞利用工具☆665Nov 3, 2025Updated 8 months ago
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆979Jun 16, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 哥斯拉Godzilla定制化插件，接收恶意类Base64编码与恶意类类名进行实例化，达到注入任意类型内存马的目的。☆48Dec 30, 2025Updated 6 months ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆573Apr 3, 2026Updated 3 months ago
- Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术…☆213Apr 11, 2026Updated 3 months ago
- api接口测试工具,包括swagger文档，asp接口文档,wsdl接口,wadl接口,一键自动跑接口☆170Mar 30, 2026Updated 3 months ago
- FastjsonScan4Burp 一款基于burp被动扫描的fastjson漏洞探测插件，可针对数据包中存在json的参数或请求体进行payload测试。旨在帮助安全人员更加便捷的发现、探测、深入利用fastjson漏洞，目前已实现fastjson探测、版本、依赖探测、出…☆172Mar 13, 2025Updated last year
- Burpsuite存储桶配置不当漏洞检测插件☆199Jul 16, 2025Updated last year
- Shiro漏洞利用工具☆160Jan 12, 2026Updated 6 months ago
- 浏览器存储桶配置漏洞检测插件☆273Nov 27, 2025Updated 8 months ago
- ☆44Sep 8, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆77Sep 10, 2025Updated 10 months ago
- ☆262Mar 31, 2026Updated 3 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆377Mar 25, 2026Updated 4 months ago
- GodzillaNodeJsPayload☆171Dec 10, 2025Updated 7 months ago
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆126Jan 14, 2025Updated last year
- Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。☆164Apr 3, 2025Updated last year
- ☆38Jun 12, 2026Updated last month