pwntester/XMLDecoder external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

pwntester/XMLDecoder

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/pwntester/XMLDecoder)

Close

pwntester / XMLDecoderView on GitHubMore

• External links
• Readme badge

RCE Exploit PoC for XMLDecoder

☆63Aug 1, 2013Updated 12 years ago

Alternatives and similar repositories for XMLDecoder

Users that are interested in XMLDecoder are comparing it to the libraries listed below

• SecureSkyTechnology / study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

  View on GitHub
  Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
  ☆107Dec 13, 2017Updated 8 years ago
• mbechler / serjs

  View on GitHub
  A Java serializer in JavaScript
  ☆80May 21, 2018Updated 7 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆210Mar 10, 2019Updated 7 years ago
• Hpd0ger / InFoCollecter

  View on GitHub
  针对域名/页面的接口爬取，递归模式入库
  ☆22Sep 18, 2019Updated 6 years ago
• pwntester / SerialKillerBypassGadgetCollection

  View on GitHub
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆387Apr 16, 2022Updated 3 years ago
• Ridter / SharpAddDomainMachine

  View on GitHub
  SharpAddDomainMachine
  ☆69Oct 12, 2021Updated 4 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 3 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

  View on GitHub
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆106Dec 3, 2018Updated 7 years ago
• securityroots / passdb

  View on GitHub
  Ruby interface to cirt.net default passwords database
  ☆19May 4, 2011Updated 14 years ago
• shengqi158 / S2-055-PoC

  View on GitHub
  S2-055的环境，基于rest-show-case改造
  ☆37Dec 7, 2017Updated 8 years ago
• jas502n / gitlab-SSRF-redis-RCE

  View on GitHub
  GitLab 11.4.7 SSRF配合redis远程执行代码
  ☆120Apr 24, 2019Updated 6 years ago
• blazeinfosec / CVE-2017-10366_peoplesoft

  View on GitHub
  CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit
  ☆25Sep 4, 2018Updated 7 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆255Jul 1, 2016Updated 9 years ago
• AV1080p / solana-dex-info

  View on GitHub
  Solana Dex Info for arbitrage bot
  ☆18Sep 6, 2025Updated 6 months ago
• mzeyong / CVE-2017-13089

  View on GitHub
  CVE-2017-13089
  ☆55Nov 15, 2017Updated 8 years ago
• al0ne / MacCheck

  View on GitHub
  一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项
  ☆78Jul 21, 2020Updated 5 years ago
• haibara3839 / CVE-2017-0199-master

  View on GitHub
  CVE-2017-0199
  ☆16Apr 19, 2017Updated 8 years ago
• syriusbughunt / From_JIRA_to_Shell

  View on GitHub
  Learn how to get a reverse shell from JIRA application server
  ☆24Dec 2, 2018Updated 7 years ago
• Tr3jer / dnsAutoRebinding

  View on GitHub
  ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6
  ☆217Aug 17, 2017Updated 8 years ago
• kirillwow / ids_bypass

  View on GitHub
  IDS Bypass tricks
  ☆122Jan 11, 2019Updated 7 years ago
• shengqi158 / fastjson-remote-code-execute-poc

  View on GitHub
  fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java
  ☆403Dec 16, 2022Updated 3 years ago
• Ridter / CVE-2018-15982_EXP

  View on GitHub
  exp of CVE-2018-15982
  ☆181Jan 4, 2019Updated 7 years ago
• Artemis1029 / Java_xmlhack

  View on GitHub
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆166Apr 5, 2019Updated 6 years ago
• mogwaisec / mjet

  View on GitHub
  Mogwai Java Management Extensions (JMX) Exploitation Toolkit
  ☆174Jul 21, 2016Updated 9 years ago
• erpscanteam / CVE-2018-2380

  View on GitHub
  PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
  ☆52Mar 14, 2018Updated 8 years ago
• kozmic / laravel-poc-CVE-2018-15133

  View on GitHub
  PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
  ☆260Mar 10, 2024Updated 2 years ago
• Tom4t0 / cobalt-strike-persistence

  View on GitHub
  cobalt strike 自启动脚本
  ☆41Mar 19, 2017Updated 9 years ago
• GoSecure / break-fast-serial

  View on GitHub
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆55Mar 27, 2017Updated 8 years ago
• NetSPI / WebLogicPasswordDecryptor

  View on GitHub
  PowerShell script and Java code to decrypt WebLogic passwords
  ☆247Jul 20, 2015Updated 10 years ago
• jjf012 / PassiveScanner

  View on GitHub
  a passive scanner based on Mitmproxy and Arachni
  ☆108Aug 17, 2017Updated 8 years ago
• nullptrKey / F-MiddlewareScan

  View on GitHub
  ☆18Jun 19, 2016Updated 9 years ago
• firesunCN / My_CTF_Challenges

  View on GitHub
  ☆55May 12, 2017Updated 8 years ago
• Ridter / GhostPotato

  View on GitHub
  Just pick out the code we need.
  ☆65Nov 22, 2019Updated 6 years ago
• jas502n / kibana-RCE

  View on GitHub
  kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609
  ☆89Oct 22, 2019Updated 6 years ago
• joaomatosf / JavaDeserH2HC

  View on GitHub
  Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).
  ☆522Mar 11, 2022Updated 4 years ago
• phith0n / arbitrary-php-extension

  View on GitHub
  这是一个实验性的PHP扩展，加载这个扩展后，每次请求将可以执行一段自己的PHP代码。
  ☆198Oct 22, 2018Updated 7 years ago
• fate0 / prvd

  View on GitHub
  PHP Runtime Vulnerability Detection
  ☆480May 25, 2019Updated 6 years ago
• jnqpblc / Misc-CSharp

  View on GitHub
  Miscellaneous C-Sharp projects for red team activities
  ☆24Aug 12, 2022Updated 3 years ago
• fate0 / xmark

  View on GitHub
  A PHP7 extension that can hook most functions/classes and parts of opcodes
  ☆242Sep 17, 2021Updated 4 years ago