mogwailabs / deserialization-filter-blacklists
Native Java serialization filter blacklist for common gadgets
☆20Updated 5 years ago
Alternatives and similar repositories for deserialization-filter-blacklists:
Users that are interested in deserialization-filter-blacklists are comparing it to the libraries listed below
- POC for leaking java version through file and ftp protocols☆24Updated 4 years ago
- Dependencies with Log4j2 Checklist☆35Updated 3 years ago
- Spring Boot Actuator + Spring Cloud Vul Env☆19Updated 5 years ago
- A Zhiyuan OA Collaborative Office Remote Code Execution Vulnerability on Windows☆36Updated 5 years ago
- phpweb 前台任意文件上传☆16Updated 5 years ago
- ☆18Updated 6 years ago
- ☆18Updated 6 years ago
- ☆28Updated 5 years ago
- a Burp Extender that add an random X-Forward-For IP address for each request☆31Updated 8 years ago
- A fastjson payload generator☆57Updated 4 years ago
- CVE-2019-2890 WebLogic 反序列化RCE漏洞☆43Updated 5 years ago
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆69Updated 4 years ago
- The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.☆20Updated 6 years ago
- LANGZI_SRC_安全巡航 是一款集成漏扫,验证,资产监控,自动复现并且生成结果表报的工具,实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。☆14Updated 5 years ago
- 蚁剑其他脚本AES编/解码器☆36Updated 5 years ago
- CVE-2018-3252-PoC☆74Updated 6 years ago
- fastjson-1.2.61-RCE☆33Updated 5 years ago
- Nagios XI远程命令执行漏洞 <v5.6.9☆23Updated 5 years ago
- Plugin For BurpSuite (Pentester)☆35Updated 2 years ago
- CVE-2020-9548:FasterXML/jackson-databind 远程代码执行漏洞☆23Updated 5 years ago
- ☆19Updated 4 years ago
- source code of XCTF 2019 Final web task "tfboys"☆29Updated 2 years ago
- autoType enable☆36Updated 5 years ago
- 几条关于CVE-2020-15148(yii2反序列化)的绕过☆75Updated 4 years ago
- awvs12统一面板管理多引擎Multi-engine,一键docker部署☆14Updated 5 years ago
- A database of options to use when pen testing an application. Sample XSS, SQLi and much more. It's been gathered over time. It's not perf…☆16Updated 4 years ago
- ☆1Updated 6 years ago
- CVE-2018-3191 反弹shell☆16Updated 6 years ago
- https://jira.atlassian.com/browse/JRASERVER-69793☆10Updated 5 years ago
- 收集了java XXE漏洞的demo及修复方式☆19Updated last year