pyn3rd/Apache-Tomcat-MongoDB-Remote-Code-Execution external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

pyn3rd/Apache-Tomcat-MongoDB-Remote-Code-Execution

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/pyn3rd/Apache-Tomcat-MongoDB-Remote-Code-Execution)

Close

pyn3rd / Apache-Tomcat-MongoDB-Remote-Code-ExecutionView on GitHubMore

• External links
• Readme badge

Apache Tomcat + MongoDB Remote Code Execution

☆113Jan 15, 2021Updated 5 years ago

Alternatives and similar repositories for Apache-Tomcat-MongoDB-Remote-Code-Execution

Users that are interested in Apache-Tomcat-MongoDB-Remote-Code-Execution are comparing it to the libraries listed below

• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• Y4er / fastjson-bypass-autotype-1.2.68

  View on GitHub
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆229Oct 12, 2022Updated 3 years ago
• inspiringz / Shiro-721

  View on GitHub
  Shiro-721 RCE Via RememberMe Padding Oracle Attack
  ☆269Oct 29, 2020Updated 5 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆458Mar 24, 2022Updated 3 years ago
• Y4er / CVE-2020-2883

  View on GitHub
  Weblogic coherence.jar RCE
  ☆176May 10, 2020Updated 5 years ago
• Y4er / CVE-2020-2551

  View on GitHub
  Weblogic IIOP CVE-2020-2551
  ☆339Apr 7, 2020Updated 5 years ago
• jas502n / CVE-2020-10199

  View on GitHub
  CVE-2020-10199、CVE-2020-10204、CVE-2020-11444
  ☆35Apr 9, 2020Updated 5 years ago
• lucasamorimca / CVE-2020-8163

  View on GitHub
  CVE-2020-8163 - Remote code execution of user-provided local names in Rails
  ☆61Dec 14, 2022Updated 3 years ago
• jas502n / fastjson-1.2.60-rce

  View on GitHub
  autoType enable
  ☆36Sep 21, 2019Updated 6 years ago
• jas502n / CVE-2019-10392

  View on GitHub
  CVE-2019-10392 RCE Jackson with Git Client Plugin 2.8.2 (Authenticated)
  ☆21Sep 26, 2019Updated 6 years ago
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆484Dec 9, 2020Updated 5 years ago
• Slzdude / behinder_source

  View on GitHub
  Behinder3.0 Beta4 源码（Decompile and Fixed）
  ☆207Sep 1, 2020Updated 5 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 3 years ago
• kingkaki / ysoserial

  View on GitHub
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆103Mar 10, 2020Updated 5 years ago
• BishopFox / GadgetProbe

  View on GitHub
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆613Mar 4, 2021Updated 4 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• shadow-horse / CVE-2019-17571

  View on GitHub
  Apache Log4j 1.2.X存在反序列化远程代码执行漏洞
  ☆78Dec 25, 2019Updated 6 years ago
• evi1ox / MSSQL_BackDoor

  View on GitHub
  ☆159Aug 4, 2020Updated 5 years ago
• zcgonvh / POPFuckProxy

  View on GitHub
  POP3 MITM example
  ☆27Dec 12, 2019Updated 6 years ago
• potats0 / javaSerializationTools

  View on GitHub
  ☆143Jan 21, 2021Updated 5 years ago
• hayasec / reGeorg-Weblogic

  View on GitHub
  reGeorg的特殊版本，适用于老版本weblogic。
  ☆151Apr 30, 2020Updated 5 years ago
• Yt1g3r / CVE-2019-3396_EXP

  View on GitHub
  CVE-2019-3396 confluence SSTI RCE
  ☆174Oct 1, 2020Updated 5 years ago
• aaronsvk / CVE-2020-3956

  View on GitHub
  PoC exploit for VMware Cloud Director RCE (CVE-2020-3956)
  ☆89Jun 2, 2020Updated 5 years ago
• virink / as_scanwebshell

  View on GitHub
  An AntSword's plugin to scan webshell
  ☆16Sep 2, 2019Updated 6 years ago
• Y4er / CVE-2020-2555

  View on GitHub
  Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE
  ☆176Dec 15, 2022Updated 3 years ago
• wuppp / shiro_rce_exp

  View on GitHub
  Shiro RCE (Padding Oracle Attack)
  ☆148Nov 15, 2019Updated 6 years ago
• mhaskar / CVE-2019-20224

  View on GitHub
  The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224
  ☆14Jan 10, 2020Updated 6 years ago
• hktalent / CVE_2020_2546

  View on GitHub
  CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc pyth…
  ☆133Mar 5, 2023Updated 2 years ago
• Imanfeng / Apache-Solr-RCE

  View on GitHub
  Apache Solr Exploits 🌟
  ☆348Oct 13, 2020Updated 5 years ago
• projectzeroindia / CVE-2019-11510

  View on GitHub
  Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
  ☆364Jan 11, 2020Updated 6 years ago
• jas502n / CVE-2020-5902

  View on GitHub
  CVE-2020-5902 BIG-IP
  ☆374Oct 13, 2021Updated 4 years ago
• cbwang505 / CVE-2020-1066-EXP

  View on GitHub
  CVE-2020-1066-EXP支持Windows 7和Windows Server 2008 R2操作系统
  ☆187Jun 17, 2020Updated 5 years ago
• feihong-cs / JspMaster-Deprecated

  View on GitHub
  一款基于webshell命令执行功能实现的GUI webshell管理工具，支持流量加密
  ☆218Jun 4, 2021Updated 4 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆255Jul 1, 2016Updated 9 years ago
• mzer0one / CVE-2020-7961-POC

  View on GitHub
  ☆119Apr 14, 2020Updated 5 years ago
• r00tuser111 / ActuatorExploitTools

  View on GitHub
  一款用于攻击spring boot actuator的集成环境，目前集成三种攻击方式，支持1.x、2.x
  ☆86Jul 26, 2021Updated 4 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆823Sep 23, 2022Updated 3 years ago
• Tycx2ry / SweetPotato_CS

  View on GitHub
  修改的SweetPotato，使之可以用于CobaltStrike v4.0
  ☆246Apr 30, 2020Updated 5 years ago