mogwailabs / deserialization-filter-blacklists
Native Java serialization filter blacklist for common gadgets
☆20Updated 5 years ago
Alternatives and similar repositories for deserialization-filter-blacklists:
Users that are interested in deserialization-filter-blacklists are comparing it to the libraries listed below
- POC for leaking java version through file and ftp protocols☆24Updated 4 years ago
- source code of XCTF 2019 Final web task "tfboys"☆29Updated 2 years ago
- a Burp Extender that add an random X-Forward-For IP address for each request☆31Updated 8 years ago
- Spring Boot Actuator + Spring Cloud Vul Env☆19Updated 5 years ago
- ☆28Updated 5 years ago
- Dependencies with Log4j2 Checklist☆35Updated 3 years ago
- The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.☆20Updated 6 years ago
- A fastjson payload generator☆57Updated 4 years ago
- ☆18Updated 6 years ago
- 蚁剑其他脚本AES编/解码器☆36Updated 5 years ago
- ☆19Updated 4 years ago
- autoType enable☆36Updated 5 years ago
- phpweb 前台任意文件上传☆17Updated 5 years ago
- A Zhiyuan OA Collaborative Office Remote Code Execution Vulnerability on Windows☆36Updated 5 years ago
- Papers☆34Updated 5 years ago
- LANGZI_SRC_安全巡航 是一款集成漏扫,验证,资产监控,自动复现并且生成结果表报的工具,实现初衷是为了帮助 白帽子在SRC中节约时间成本的自动化工具。☆14Updated 5 years ago
- CVE-2019-2890 WebLogic 反序列化RCE漏洞☆43Updated 5 years ago
- ☆1Updated 6 years ago
- POP3 MITM example☆26Updated 5 years ago
- CVE-2018-3191 反弹shell☆16Updated 6 years ago
- fastjson 在1.2.60以下时,处理/xHH出现问题,导致程序OOM,最终导致DoS☆10Updated 2 years ago
- 针对域名/页面的接口爬取,递归模式入库☆22Updated 5 years ago
- CVE-2020-9548:FasterXML/jackson-databind 远程代码执行漏洞☆23Updated 4 years ago
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆69Updated 4 years ago
- 用WebShell攻击PHP-FPM Attacking PHP-FPM with WebShell☆41Updated 3 years ago
- Nagios XI远程命令执行漏洞 <v5.6.9☆23Updated 5 years ago
- ☆58Updated 4 years ago
- fastjson-1.2.61-RCE☆33Updated 5 years ago
- Burpsuite Plugin For AES Crack☆37Updated 4 years ago
- DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。☆45Updated 4 years ago