lz2y / DubboPOC

Related projects: ⓘ

• kyo-w / Spel-research
  Spel-research
  ☆24Updated 2 years ago
• woodpecker-appstore / java-memshell-generator
  Java 内存马生成插件
  ☆48Updated last year
• yuligesec / watchvuln
  一个高价值漏洞采集与推送服务 | A valueable vulnerability collection and push service
  ☆31Updated 2 months ago
• Le1a / CVE-2023-33246
  Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit
  ☆76Updated last year
• su18 / rasp-vuln
  当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。
  ☆78Updated 2 years ago
• KpLi0rn / ysoserial
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Updated 3 years ago
• longofo / Apache-Dubbo-Hessian2-CVE-2021-43297
  Apache Dubbo Hessian2 CVE-2021-43297 demo
  ☆46Updated 2 years ago
• wh1t3p1g / tabby-intellij-plugin
  A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily
  ☆26Updated 2 months ago
• AfterSnows / ApricusFindEvil
  检测查杀java内存马
  ☆73Updated 9 months ago
• boy-hack / w15scan
  ☆67Updated this week
• DaxiaSec / DaxiaGeGe
  ☆47Updated this week
• ax1sX / MemShell
  MemShell List
  ☆77Updated last year
• Getshell / Fanzhi
  《FanZhi-攻击与反制的艺术》
  ☆59Updated 9 months ago
• KpLi0rn / ShiroVulnEnv
  Shiro内存马注入环境
  ☆56Updated 3 years ago
• turn1tup / JvmRaspBypass
  ☆4Updated last year
• Lotus6 / FileMonitor
  Java命令行文件监控小工具(代码审计)
  ☆92Updated 2 years ago
• woodpecker-framework / woodpecker-requests
  woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。
  ☆68Updated last year
• KpLi0rn / DeserializeAll
  一个简单的批量反编译jar包的小脚本
  ☆30Updated 2 years ago
• Y4Sec-Team / no-templates
  如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过
  ☆44Updated last year
• mark0smith / Kunlun-M-GUI
  Kunlun-M 的GUI程序
  ☆50Updated last year
• hosch3n / FastjsonVulns
  [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
  ☆90Updated 2 years ago
• 0linlin0 / Java
  java
  ☆54Updated last year
• Hackaspx / Hackaspx
  《ASPX安全-只有ASPX安全才能拯救.NET》Only ASPX Security Can Save The NET.
  ☆33Updated last year
• xiaopan233 / GenerateNoHard
  本工具的定位是快速生成Java安全相关的Payload，如内存马、反序列化链、JNDI url、Fastjson等，动态生成相关Payload，并附带相应的文档。
  ☆88Updated last year
• HackJava / Spring
  《Spring漏洞研究》
  ☆44Updated 2 years ago
• webraybtl / ysoserialbtl
  基于ysoserial扩展命令执行结果回显，生成冰蝎内存马
  ☆84Updated last year
• Ghost2097221 / addMemShellsJSP
  通过jsp注入valve内存马，可以忽略框架影响，通用tomcat789
  ☆90Updated 2 years ago
• yyhuni / shiroMemshell
  利用shiro反序列化注入冰蝎内存马
  ☆33Updated 2 years ago
• K1p2y3 / Tencent_Yun_tools
  ☁️Tencent Cloud AccessKey tools
  ☆16Updated 2 months ago
• bitterzzZZ / CVE-2021-43297-POC
  CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE
  ☆38Updated 2 years ago