fastjson_rce工具,不用搭建HTTP服务,不受JDK版本限制
☆10Nov 25, 2019Updated 6 years ago
Alternatives and similar repositories for fastjson_rce_tool
Users that are interested in fastjson_rce_tool are comparing it to the libraries listed below
Sorting:
- nmap默认的scripts和自己收集的一些scripts☆21Feb 22, 2018Updated 8 years ago
- 让ELF以特定libc链接运行,带符号版本☆14Mar 10, 2020Updated 5 years ago
- collect☆17Aug 29, 2019Updated 6 years ago
- phpweb 前台任意文件上传☆16Jan 9, 2020Updated 6 years ago
- RememberMe Padding Oracle Vulnerability RCE☆72Nov 14, 2019Updated 6 years ago
- ☆41Nov 9, 2018Updated 7 years ago
- ☆20Nov 20, 2017Updated 8 years ago
- vulhub下载器,可则需下载对应环境☆23Sep 19, 2018Updated 7 years ago
- The Security Practices of Party A Phishing☆20Nov 9, 2019Updated 6 years ago
- CVE-2019-16759 vbulletin 5.0.0 till 5.5.4 pre-auth rce☆20Aug 11, 2020Updated 5 years ago
- 记录流量的http(s)代理+分布式被动漏洞扫描☆24Jun 30, 2019Updated 6 years ago
- Redis RCE 的几种方法☆90Jun 5, 2024Updated last year
- 通过webshell实现的内网穿透工具☆49Nov 19, 2019Updated 6 years ago
- 一个可快速“搬运”cookie的Burp Suite插件☆25Apr 13, 2018Updated 7 years ago
- shiro反序列化检测(只是个玩具23333)☆10Jan 16, 2024Updated 2 years ago
- Xray 被动扫描管理☆59May 1, 2020Updated 5 years ago
- Some of CTF scripts☆35Nov 12, 2022Updated 3 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆103Mar 10, 2020Updated 5 years ago
- crawlergo-to-xray,可以把0Kee-Team crawlergo爬虫爬取的链接推送给长亭xray分析,xray分析后自动调用webhook接口利用server酱实时推送漏洞预警到微信,让你躺着挖漏洞。支持多线程。☆30Jun 5, 2020Updated 5 years ago
- Shiro_721 exp 纯手工实现Padding Oracle整个过程☆67Nov 20, 2019Updated 6 years ago
- 打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。☆32Jan 3, 2020Updated 6 years ago
- awesome hacking chinese version☆24Apr 10, 2017Updated 8 years ago
- 记录调试分析ysoserial系列的学习过程,主要包含手动构造的一些poc,便于加深对漏洞和工具的理解☆30Jun 15, 2020Updated 5 years ago
- Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340☆71Jun 10, 2020Updated 5 years ago
- PHPStudy_BackDoor_EXP PHPstudy后门利用脚本☆68Sep 24, 2019Updated 6 years ago
- ☆23Oct 29, 2019Updated 6 years ago
- 解析netsh抓取的etl文件来定位windows主机上存在ICMP通信的进程与文件的小工具☆31Apr 22, 2022Updated 3 years ago
- 轻量级漏洞验证和利用框架☆32May 10, 2022Updated 3 years ago
- 一个Burp插件,实现用AES算法透明加密原版菜刀Caidao.exe与服务器端交互的http数据流☆79Jan 19, 2019Updated 7 years ago
- PHP技巧☆10Oct 25, 2019Updated 6 years ago
- Burpsuite Plugin For AES Crack☆37Jun 17, 2020Updated 5 years ago
- ☆15Apr 23, 2025Updated 10 months ago
- Java After-Deserialization Attack☆79Apr 26, 2021Updated 4 years ago
- JWT_Brute☆32Oct 10, 2019Updated 6 years ago
- This is a filter bypass exploit that results in arbitrary file upload and remote code execution in class.upload.php <= 2.0.4☆36Dec 8, 2019Updated 6 years ago
- CVE-2020-8840:FasterXML/jackson-databind 远程代码执行漏洞☆37Feb 24, 2020Updated 6 years ago
- 利用python脚本对文本内容进行敏感信息的识别与过滤☆38Jan 12, 2016Updated 10 years ago
- New Found 0-days!☆36Dec 4, 2019Updated 6 years ago
- tomcat使用了自带session同步功能时,不安全的配置(没有使用EncryptInterceptor)导致存在的反序列化漏洞,通过精心构造的数据包, 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484,9484…☆212May 19, 2020Updated 5 years ago