Alternatives and similar repositories for PaddingOracleAttack-Shiro-721:

Users that are interested in PaddingOracleAttack-Shiro-721 are comparing it to the libraries listed below

• welk1n / FastjsonPocs
  一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。
  ☆56Updated 5 years ago
• woodpecker-appstore / springboot-vuldb
  ☆68Updated 3 years ago
• SummerSec / LookupInterface
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆163Updated 2 years ago
• su18 / rasp-vuln
  当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。
  ☆78Updated 2 years ago
• passer-W / snakeyaml-memshell
  springboot跨线程注入内存马
  ☆116Updated 2 years ago
• coffeehb / Spring4Shell
  一个Spring4Shell 被动式检测的Burp插件
  ☆93Updated 2 years ago
• mstxq17 / cve-2020-1472
  cve-2020-1472 复现利用及其exp
  ☆109Updated 4 years ago
• R17a-17 / JavaVulnSummary
  Java漏洞分析汇合
  ☆142Updated 3 years ago
• OneSourceCat / XxlJob-Hessian-RCE
  XxlJob<=2.1.2配置不当情况下反序列化RCE
  ☆91Updated 4 years ago
• cckuailong / YarnRpcRCE
  ☆81Updated 3 years ago
• wuppp / releaseBehinderShell
  卸载冰蝎内存马
  ☆67Updated 3 years ago
• Y4er / yaml-payload
  Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg
  ☆133Updated 4 years ago
• rufherg / WebLogic_Basic_Poc
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆93Updated 4 years ago
• threedr3am / dubbo-exp
  dubbo快速利用exp，基本上老版本覆盖100%。
  ☆105Updated last year
• zhutougg / LandrayDES
  蓝凌OA的前后台密码的加解密工具
  ☆94Updated 4 years ago
• winezer0 / springboot_scan
  支持自动化的切换请求方式、自动化的请求重试、以完整的扫描Springboot路径
  ☆3Updated 2 years ago
• KpLi0rn / ShiroVulnEnv
  Shiro内存马注入环境
  ☆59Updated 3 years ago
• hosch3n / FastjsonVulns
  [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
  ☆90Updated 2 years ago
• Lonely-night / fastjsonVul
  fastjson 80 远程代码执行漏洞复现
  ☆191Updated 2 years ago
• vulhub / Apereo-CAS-Attack
  WIP: Demo for Attacking Apereo CAS
  ☆89Updated 4 years ago
• Echox1 / ShiroExploit
  ☆38Updated 4 years ago
• Wrin9 / weaverOA_sql_RCE
  泛微OA_V9全版本的SQL远程代码执行漏洞
  ☆157Updated 2 years ago
• ce-automne / FastjsonPatrol
  一款探测fastjson漏洞的BurpSuite插件
  ☆61Updated 2 years ago
• mrknow001 / xxl-job-rce
  xxl-job未授权命令执行
  ☆106Updated 3 years ago
• cyal1 / host_scan
  这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go
  ☆113Updated 2 years ago
• haby0 / sec-note
  记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。
  ☆116Updated 3 years ago
• KpLi0rn / ysoserial
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Updated 3 years ago
• 0xrumble / BytecodeScreen
  ☆50Updated 2 years ago
• sv3nbeast / X-AutoXray
  AutoScan 有多个目标时，多线程调用xray+rad进行自动扫描
  ☆88Updated 2 years ago
• jweny / shiro-cve-2020-17523
  shiro-cve-2020-17523 漏洞的两种绕过姿势分析 以及配套的漏洞环境
  ☆116Updated 4 years ago