Alternatives and similar repositories for Project

Users that are interested in Project are comparing it to the libraries listed below

• Xyntax / JBoss-exp
  java反序列化漏洞利用－JBOSS(含payload生成的java项目，漏洞利用py脚本，shodan部分目标主机搜索结果)
  ☆50Updated 9 years ago
• uknowsec / BurpSuite-Extender-fastjson
  Reference：https://www.w2n1ck.com/article/44/
  ☆155Updated 5 years ago
• coco413 / DiscoverSubdomain
  前渗透信息探测工具集-子域名
  ☆137Updated 7 years ago
• theLSA / ueditor-getshell
  ueditor .net getshell
  ☆96Updated 6 years ago
• Tycx2ry / docker_api_vul
  docker 未授权访问漏洞利用脚本
  ☆139Updated 9 years ago
• S9MF / Xss_Test
  记录个人XSS学习
  ☆105Updated 4 years ago
• guimaizi / testing_wave
  ☆58Updated 5 years ago
• Qclover / jsspider
  A js infomation dig tool.
  ☆69Updated 5 years ago
• coffeehb / struts2_check
  一个用于识别目标网站是否采用Struts2框架开发的工具demo
  ☆163Updated 7 years ago
• njcx / pocsuite_poc_collect
  collection poc use pocsuite framework 收集一些 poc with pocsuite框架
  ☆157Updated 6 years ago
• PINGXcpost / F-NAScan-PLUS
  F-NAScan-PLUS 安服资产搜集
  ☆142Updated 4 years ago
• Artemis1029 / Java_xmlhack
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆166Updated 6 years ago
• zhinaonet / bypass_disablefunc_via_LD_PRELOAD
  ☆65Updated 6 years ago
• jas502n / Hscan
  Hscan-Win-Gui
  ☆16Updated 7 years ago
• mtxiaowangzi / CAFJE
  又一个Java Web代码审计工具
  ☆100Updated 7 years ago
• threedr3am / tomcat-cluster-session-sync-exp
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆213Updated 5 years ago
• wuppp / shiro_rce_exp
  Shiro RCE (Padding Oracle Attack)
  ☆143Updated 5 years ago
• dongfangyuxiao / github_dis
  一款精简版github信息泄露搜集工具
  ☆85Updated 6 years ago
• jas502n / e-cology
  e-cology OA_Beanshell_RCE
  ☆83Updated 5 years ago
• Ch1ngg / CaidaoMitmProxy
  基于HTTP代理中转菜刀过WAF
  ☆64Updated 5 years ago
• sv3nbeast / 2019_Vul_warning_Poc_Collect
  整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善
  ☆112Updated 5 years ago
• jiansiting / CVE-2019-2725
  weblogic绕过和wls远程执行
  ☆36Updated 6 years ago
• FiveAourThe / sqlmap_api_demo
  sqlmap_api_demo
  ☆24Updated 6 years ago
• qianl0ng / CVE-2018-2893
  可以直接反弹shell
  ☆47Updated 2 years ago
• Svti / Axis2Shell
  ☆49Updated 10 years ago
• StarkChristmas / Shiro_exploit
  Apache Shiro Java Analysis and Utilization of Deserialization Vulnerabilities
  ☆41Updated 4 years ago
• wh1t3p1g / Struts2Environment
  Struts2 历史版本的漏洞环境
  ☆84Updated 8 years ago
• 3xp10it / xupload
  A tool for automatically testing whether the upload function can upload webshell
  ☆56Updated 5 years ago
• LxiaoGirl / sqlmapTamper
  测试过程中需要绕过各种waf或者全局的过滤机制，因此编写各种适合的tamper。
  ☆54Updated 10 years ago
• hackping / XXEpayload
  ☆85Updated 5 years ago