pwntester/XMLDecoder external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

pwntester/XMLDecoder

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/pwntester/XMLDecoder)

Close

pwntester / XMLDecoderView on GitHubMore

• External links
• Readme badge

RCE Exploit PoC for XMLDecoder

☆62Aug 1, 2013Updated 13 years ago

Alternatives and similar repositories for XMLDecoder

Users that are interested in XMLDecoder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• SecureSkyTechnology / study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

  View on GitHub
  Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
  ☆106Dec 13, 2017Updated 8 years ago
• irsl / jackson-rce-via-spel

  View on GitHub
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆121Jan 9, 2018Updated 8 years ago
• mbechler / serjs

  View on GitHub
  A Java serializer in JavaScript
  ☆80May 21, 2018Updated 8 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

  View on GitHub
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆104Dec 3, 2018Updated 7 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆208Mar 10, 2019Updated 7 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆390Apr 16, 2022Updated 4 years ago
• Ridter / SharpAddDomainMachine

  View on GitHub
  SharpAddDomainMachine
  ☆69Oct 12, 2021Updated 5 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆254Jul 1, 2016Updated 10 years ago
• Hpd0ger / InFoCollecter

  View on GitHub
  针对域名/页面的接口爬取，递归模式入库
  ☆21Sep 18, 2019Updated 7 years ago
• securifera / CVE-2018-6546-Exploit

  View on GitHub
  CVE-2018-6546-Exploit
  ☆41Apr 15, 2018Updated 8 years ago
• jas502n / gitlab-SSRF-redis-RCE

  View on GitHub
  GitLab 11.4.7 SSRF配合redis远程执行代码
  ☆120Apr 24, 2019Updated 7 years ago
• Tom4t0 / cobalt-strike-persistence

  View on GitHub
  cobalt strike 自启动脚本
  ☆41Mar 19, 2017Updated 9 years ago
• shengqi158 / fastjson-remote-code-execute-poc

  View on GitHub
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆402Dec 16, 2022Updated 3 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• Ridter / GhostPotato

  View on GitHub
  Just pick out the code we need.
  ☆66Nov 22, 2019Updated 6 years ago
• securityroots / passdb

  View on GitHub
  Ruby interface to cirt.net default passwords database
  ☆18May 4, 2011Updated 15 years ago
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆173Jul 21, 2016Updated 10 years ago
• Artemis1029 / Java_xmlhack

  View on GitHub
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆169Apr 5, 2019Updated 7 years ago
• al0ne / MacCheck

  View on GitHub
  一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项
  ☆79Jul 21, 2020Updated 6 years ago
• neargle / Go-Get-RCE-CVE-2018-6574-POC

  View on GitHub
  CVE-2018-6574 POC : golang 'go get' remote command execution during source code build
  ☆24Jan 14, 2022Updated 4 years ago
• blazeinfosec / CVE-2017-10366_peoplesoft

  View on GitHub
  CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
  ☆25Sep 4, 2018Updated 8 years ago
• kirillwow / ids_bypass

  View on GitHub
  IDS Bypass tricks
  ☆121Jan 11, 2019Updated 7 years ago
• brianwrf / CVE-2017-4878-Samples

  View on GitHub
  CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html
  ☆17Feb 5, 2018Updated 8 years ago
• End-to-end encrypted email - Proton Mail • Ad
  Special offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
• Ridter / CVE-2018-15982_EXP

  View on GitHub
  exp of CVE-2018-15982
  ☆178Jan 4, 2019Updated 7 years ago
• k8gege / ZimbraExploit

  View on GitHub
  Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
  ☆78Feb 22, 2023Updated 3 years ago
• haibara3839 / CVE-2017-0199-master

  View on GitHub
  CVE-2017-0199
  ☆16Apr 19, 2017Updated 9 years ago
• phith0n / arbitrary-php-extension

  View on GitHub
  这是一个实验性的PHP扩展，加载这个扩展后，每次请求将可以执行一段自己的PHP代码。
  ☆196Oct 22, 2018Updated 8 years ago
• erpscanteam / CVE-2018-2380

  View on GitHub
  PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
  ☆52Mar 14, 2018Updated 8 years ago
• joaomatosf / JavaDeserH2HC

  View on GitHub
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆518Mar 11, 2022Updated 4 years ago
• CHYbeta / CVE-2017-11427-DEMO

  View on GitHub
  The Demo for CVE-2017-11427
  ☆12Mar 3, 2018Updated 8 years ago
• shengqi158 / S2-055-PoC

  View on GitHub
  S2-055的环境，基于rest-show-case改造
  ☆37Dec 7, 2017Updated 8 years ago
• GoSecure / break-fast-serial

  View on GitHub
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆54Mar 27, 2017Updated 9 years ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• irsl / struts-any-results

  View on GitHub
  Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.
  ☆12Sep 30, 2018Updated 8 years ago
• jas502n / kibana-RCE

  View on GitHub
  kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609
  ☆89Oct 22, 2019Updated 7 years ago
• iflody / myBugAnalyze

  View on GitHub
  一些漏洞分析
  ☆48Jan 8, 2019Updated 7 years ago
• kevien / javacode

  View on GitHub
  some java code i met or i used
  ☆30May 7, 2019Updated 7 years ago
• Tr3jer / dnsAutoRebinding

  View on GitHub
  ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
  ☆215Aug 17, 2017Updated 9 years ago
• mzeyong / CVE-2017-13089

  View on GitHub
  CVE-2017-13089
  ☆55Nov 15, 2017Updated 8 years ago
• az0ne / MongoDB_AutoDump

  View on GitHub
  用于快速探测未授权MongoDB数据库结构，取第一条内容，并统计数据数量。A tool for unauthorized MongoDB database , take the first content, and the number of statistical da…
  ☆26Dec 5, 2016Updated 9 years ago