pwntester/XMLDecoder external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

pwntester/XMLDecoder

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/pwntester/XMLDecoder)

Close

pwntester / XMLDecoderView on GitHubMore

• External links
• Readme badge

RCE Exploit PoC for XMLDecoder

☆62Aug 1, 2013Updated 13 years ago

Alternatives and similar repositories for XMLDecoder

Users that are interested in XMLDecoder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• SecureSkyTechnology / study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

  View on GitHub
  Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
  ☆106Dec 13, 2017Updated 8 years ago
• irsl / jackson-rce-via-spel

  View on GitHub
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆121Jan 9, 2018Updated 8 years ago
• mbechler / serjs

  View on GitHub
  A Java serializer in JavaScript
  ☆80May 21, 2018Updated 8 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆208Mar 10, 2019Updated 7 years ago
• Hpd0ger / InFoCollecter

  View on GitHub
  针对域名/页面的接口爬取，递归模式入库
  ☆21Sep 18, 2019Updated 6 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆389Apr 16, 2022Updated 4 years ago
• Ridter / SharpAddDomainMachine

  View on GitHub
  SharpAddDomainMachine
  ☆69Oct 12, 2021Updated 4 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

  View on GitHub
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆104Dec 3, 2018Updated 7 years ago
• securityroots / passdb

  View on GitHub
  Ruby interface to cirt.net default passwords database
  ☆18May 4, 2011Updated 15 years ago
• shengqi158 / S2-055-PoC

  View on GitHub
  S2-055的环境，基于rest-show-case改造
  ☆37Dec 7, 2017Updated 8 years ago
• jas502n / gitlab-SSRF-redis-RCE

  View on GitHub
  GitLab 11.4.7 SSRF配合redis远程执行代码
  ☆120Apr 24, 2019Updated 7 years ago
• blazeinfosec / CVE-2017-10366_peoplesoft

  View on GitHub
  CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
  ☆25Sep 4, 2018Updated 7 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆256Jul 1, 2016Updated 10 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• mzeyong / CVE-2017-13089

  View on GitHub
  CVE-2017-13089
  ☆55Nov 15, 2017Updated 8 years ago
• al0ne / MacCheck

  View on GitHub
  一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项
  ☆79Jul 21, 2020Updated 6 years ago
• haibara3839 / CVE-2017-0199-master

  View on GitHub
  CVE-2017-0199
  ☆16Apr 19, 2017Updated 9 years ago
• Tr3jer / dnsAutoRebinding

  View on GitHub
  ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
  ☆215Aug 17, 2017Updated 8 years ago
• syriusbughunt / From_JIRA_to_Shell

  View on GitHub
  Learn how to get a reverse shell from JIRA application server
  ☆23Dec 2, 2018Updated 7 years ago
• kirillwow / ids_bypass

  View on GitHub
  IDS Bypass tricks
  ☆121Jan 11, 2019Updated 7 years ago
• shengqi158 / fastjson-remote-code-execute-poc

  View on GitHub
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆402Dec 16, 2022Updated 3 years ago
• Ridter / CVE-2018-15982_EXP

  View on GitHub
  exp of CVE-2018-15982
  ☆179Jan 4, 2019Updated 7 years ago
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆174Jul 21, 2016Updated 10 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• erpscanteam / CVE-2018-2380

  View on GitHub
  PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
  ☆51Mar 14, 2018Updated 8 years ago
• neargle / ver-observer

  View on GitHub
  🐽 Detection version of framework \ CMS \ dev-dependence on target website.
  ☆98Feb 11, 2019Updated 7 years ago
• Artemis1029 / Java_xmlhack

  View on GitHub
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆167Apr 5, 2019Updated 7 years ago
• kozmic / laravel-poc-CVE-2018-15133

  View on GitHub
  PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
  ☆258Mar 10, 2024Updated 2 years ago
• GoSecure / break-fast-serial

  View on GitHub
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆54Mar 27, 2017Updated 9 years ago
• Tom4t0 / cobalt-strike-persistence

  View on GitHub
  cobalt strike 自启动脚本
  ☆41Mar 19, 2017Updated 9 years ago
• NetSPI / WebLogicPasswordDecryptor

  View on GitHub
  PowerShell script and Java code to decrypt WebLogic passwords
  ☆244Jul 20, 2015Updated 11 years ago
• jjf012 / PassiveScanner

  View on GitHub
  a passive scanner based on Mitmproxy and Arachni
  ☆105Aug 17, 2017Updated 8 years ago
• jnqpblc / Misc-CSharp

  View on GitHub
  Miscellaneous C-Sharp projects for red team activities
  ☆22Aug 12, 2022Updated 3 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• joaomatosf / JavaDeserH2HC

  View on GitHub
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆521Mar 11, 2022Updated 4 years ago
• jas502n / kibana-RCE

  View on GitHub
  kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609
  ☆89Oct 22, 2019Updated 6 years ago
• Ridter / GhostPotato

  View on GitHub
  Just pick out the code we need.
  ☆66Nov 22, 2019Updated 6 years ago
• fate0 / prvd

  View on GitHub
  PHP Runtime Vulnerability Detection
  ☆479May 25, 2019Updated 7 years ago
• firesunCN / My_CTF_Challenges

  View on GitHub
  ☆55May 12, 2017Updated 9 years ago
• nullptrKey / F-MiddlewareScan

  View on GitHub
  ☆18Jun 19, 2016Updated 10 years ago
• phith0n / arbitrary-php-extension

  View on GitHub
  这是一个实验性的PHP扩展，加载这个扩展后，每次请求将可以执行一段自己的PHP代码。
  ☆196Oct 22, 2018Updated 7 years ago