potats0/shiroPoc external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

potats0/shiroPoc

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/potats0/shiroPoc)

Close

potats0 / shiroPocView on GitHubMore

• External links
• Readme badge

☆318Jun 4, 2021Updated 5 years ago

Alternatives and similar repositories for shiroPoc

Users that are interested in shiroPoc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• feihong-cs / ShiroExploit-Deprecated

  View on GitHub
  Shiro550/Shiro721 一键化利用工具，支持多种回显方式
  ☆1,957Jun 4, 2021Updated 5 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,014May 21, 2024Updated 2 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆529Aug 25, 2020Updated 6 years ago
• sv3nbeast / ShiroScan

  View on GitHub
  Shiro<=1.2.4反序列化，一键检测工具
  ☆977Mar 4, 2021Updated 5 years ago
• jas502n / Shiro_Xray

  View on GitHub
  CommonsBeanutils1,CommonsCollectionsK1
  ☆58Nov 16, 2020Updated 5 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• FunnyWolf / pystinger

  View on GitHub
  Bypass firewall for traffic forwarding using webshell
  ☆1,425Sep 29, 2021Updated 5 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,007Oct 15, 2020Updated 6 years ago
• Y4er / CVE-2020-2551

  View on GitHub
  Weblogic IIOP CVE-2020-2551
  ☆336Apr 7, 2020Updated 6 years ago
• zema1 / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆357Sep 20, 2022Updated 4 years ago
• bigsizeme / shiro-check

  View on GitHub
  Shiro反序列化回显利用、内存shell、检查 Burp插件
  ☆214Sep 1, 2022Updated 4 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,394Jan 18, 2022Updated 4 years ago
• pandasec888 / taowu-cobalt_strike

  View on GitHub
  ☆1,838Nov 24, 2025Updated 11 months ago
• Ares-X / shiro-exploit

  View on GitHub
  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
  ☆893May 28, 2021Updated 5 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆139Aug 9, 2026Updated 2 months ago
• GPUs on demand by Runpod - Special Offer Available • Ad
  Run AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
• uknowsec / BurpSuite-Extender-fastjson

  View on GitHub
  Reference：https://www.w2n1ck.com/article/44/
  ☆156Mar 7, 2020Updated 6 years ago
• acgbfull / Apache_Shiro_1.2.4_RCE

  View on GitHub
  Apache shiro <= 1.2.4 rememberMe 反序列化漏洞利用工具
  ☆21Feb 4, 2020Updated 6 years ago
• QAX-A-Team / sharpwmi

  View on GitHub
  sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆713Aug 3, 2021Updated 5 years ago
• timwhitez / crawlergo_x_XRAY

  View on GitHub
  360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能
  ☆1,181Nov 10, 2021Updated 4 years ago
• pmiaowu / BurpShiroPassiveScan

  View on GitHub
  一款基于BurpSuite的被动式shiro检测插件
  ☆1,806Dec 14, 2022Updated 3 years ago
• c0ny1 / FastjsonExploit

  View on GitHub
  Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
  ☆1,407Dec 16, 2022Updated 3 years ago
• cbwang505 / CVE-2019-0708-EXP-Windows

  View on GitHub
  CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell
  ☆317Jan 21, 2020Updated 6 years ago
• Tycx2ry / SweetPotato_CS

  View on GitHub
  修改的SweetPotato，使之可以用于CobaltStrike v4.0
  ☆244Apr 30, 2020Updated 6 years ago
• wyzxxz / shiro_rce_tool

  View on GitHub
  shiro 反序列 命令执行辅助检测工具
  ☆1,602May 21, 2024Updated 2 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆447Jun 19, 2024Updated 2 years ago
• uknowsec / SharpToolsAggressor

  View on GitHub
  内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~
  ☆499Feb 13, 2020Updated 6 years ago
• lengjibo / RedTeamTools

  View on GitHub
  记录自己编写、修改的部分工具
  ☆1,473Oct 19, 2025Updated last year
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,025Feb 23, 2022Updated 4 years ago
• hack2fun / BypassAV

  View on GitHub
  Cobalt Strike插件，用于快速生成免杀的可执行文件
  ☆904Jul 19, 2020Updated 6 years ago
• Ch1ngg / JCE

  View on GitHub
  JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本
  ☆258Oct 29, 2021Updated 5 years ago
• Y4er / fastjson-bypass-autotype-1.2.68

  View on GitHub
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆228Oct 12, 2022Updated 4 years ago
• CTF-MissFeng / GoScan

  View on GitHub
  GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用
  ☆711May 6, 2021Updated 5 years ago
• lengjibo / NetUser

  View on GitHub
  使用windows api添加用户，可用于net无法使用时.分为nim版，c++版本，RDI版，BOF版。
  ☆418Sep 29, 2021Updated 5 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• r0eXpeR / redteam_vul

  View on GitHub
  红队作战中比较常遇到的一些重点系统漏洞整理。
  ☆2,529Jul 17, 2021Updated 5 years ago
• pmiaowu / BurpFastJsonScan

  View on GitHub
  一款基于BurpSuite的被动式FastJson检测插件
  ☆1,257Oct 1, 2022Updated 4 years ago
• broken5 / WebAliveScan

  View on GitHub
  对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描
  ☆903Dec 8, 2022Updated 3 years ago
• r35tart / RedisWriteFile

  View on GitHub
  通过 Redis 主从写出无损文件
  ☆717May 25, 2020Updated 6 years ago
• shack2 / skyscorpion

  View on GitHub
  新版将不再对外公开发布。天蝎权限管理工具采用Java平台的JavaFX技术开发的桌面客户端，支持跨平台运行，目前基于JDK1.8开发，运行必须安装JDK或JRE 1.8，注意不能是open jdk，只能是oracle的jdk。 天蝎权限管理工具基于冰蝎加密流量进行WebSh…
  ☆384Mar 22, 2021Updated 5 years ago
• Slzdude / behinder_source

  View on GitHub
  Behinder3.0 Beta4 源码（Decompile and Fixed）
  ☆206Sep 1, 2020Updated 6 years ago
• hayasec / reGeorg-Weblogic

  View on GitHub
  reGeorg的特殊版本，适用于老版本weblogic。
  ☆150Apr 30, 2020Updated 6 years ago