qi4L/CVE-2024-38077 external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

qi4L/CVE-2024-38077

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/qi4L/CVE-2024-38077)

Close

qi4L / CVE-2024-38077View on GitHubMore

• External links
• Readme badge

RDL的堆溢出导致的RCE

☆224Aug 14, 2024Updated 2 years ago

Alternatives and similar repositories for CVE-2024-38077

Users that are interested in CVE-2024-38077 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• qi4L / JYso-skills

  View on GitHub
  用 AI 来操作JYso，并在AI遇到反序列化和JNDI注入情况自动调用
  ☆27Jun 1, 2026Updated 3 months ago
• Whoopsunix / JavaRce

  View on GitHub
  Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式
  ☆549Mar 6, 2025Updated last year
• convisolabs / CVE-2024-43044-jenkins

  View on GitHub
  Exploit for the vulnerability CVE-2024-43044 in Jenkins
  ☆185Oct 2, 2024Updated last year
• Ar3h / utf8-overlong-agent

  View on GitHub
  使用 agent 实现反序列化 utf8 overlong
  ☆84Apr 24, 2024Updated 2 years ago
• 4ra1n / poc-runner

  View on GitHub
  Small & Fast Vulnerability Scanner Engine based on XRAY YAML Rule | 基于 XRAY YAML 规则的超轻量快速漏洞扫描引擎 | 基于 ANTLR 实现语法分析和完整的 XRAY YAML 规则实现 | 简单…
  ☆179Jul 10, 2025Updated last year
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• Chave0v0 / YONYOU-TOOL

  View on GitHub
  用友漏洞综合利用工具
  ☆269Nov 9, 2024Updated last year
• qi4L / sRDI-rs

  View on GitHub
  Rust 重构的 sRDI
  ☆17Sep 9, 2024Updated 2 years ago
• Boogipop / CVE-2023-22527-Godzilla-MEMSHELL

  View on GitHub
  CVE-2023-22527 内存马注入工具
  ☆74Feb 21, 2024Updated 2 years ago
• Conan924 / NacosExploit

  View on GitHub
  NacosExploit 命令执行 内存马等利用
  ☆217Jul 18, 2024Updated 2 years ago
• Janhsu / DockerAPITool

  View on GitHub
  DockerRemoteAPI未授权访问(2375端口)利用工具，支持容器逃逸
  ☆69Dec 29, 2024Updated last year
• Hutt0n0 / ActiveMqRCE

  View on GitHub
  用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入
  ☆287Nov 20, 2023Updated 2 years ago
• nex121 / RuoyiGui

  View on GitHub
  ☆24Dec 13, 2024Updated last year
• Lotus6 / ConfluenceMemshell

  View on GitHub
  Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入
  ☆565Feb 1, 2024Updated 2 years ago
• wjlin0 / riverPass

  View on GitHub
  riverPass 是一个用Go编写的瑞数WAF绕过工具。它利用了WebSocket协议，将请求发送的自身浏览器中，从而绕过了瑞数WAF的检测。
  ☆236Oct 18, 2024Updated last year
• End-to-end encrypted email - Proton Mail • Ad
  Special offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
• veo / ebpf_shell

  View on GitHub
  ebpf WebShell/内核马，一种新型内核马/WebShell技术
  ☆350Jan 8, 2024Updated 2 years ago
• qi4L / WeblogicScan-go

  View on GitHub
  WeblogicScan一键检测
  ☆126May 6, 2024Updated 2 years ago
• lightr3d / CVE-2024-21006_jar

  View on GitHub
  CVE-2024-21006 exp
  ☆16Jul 29, 2024Updated 2 years ago
• triplexlove / javasocket

  View on GitHub
  java实现反序列化建立socket连接
  ☆60Dec 27, 2024Updated last year
• l3yx / jdwp-codeifier

  View on GitHub
  基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）
  ☆332Dec 22, 2024Updated last year
• hakaioffsec / CVE-2024-21338

  View on GitHub
  Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
  ☆333Apr 16, 2024Updated 2 years ago
• Symph0nia / Coda

  View on GitHub
  入侵痕迹清理/Cleaning up traces of intrusion
  ☆253Jul 15, 2026Updated 2 months ago
• qi4L / Ysoserial-go

  View on GitHub
  A Go library for generating Java deserialization payloads.
  ☆152Sep 9, 2024Updated 2 years ago
• Pizz33 / JoJoLoader

  View on GitHub
  助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan
  ☆634Aug 7, 2024Updated 2 years ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• suizhibo / MemShellGene

  View on GitHub
  一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。
  ☆265Feb 15, 2026Updated 7 months ago
• Phelaine / SinkFinder

  View on GitHub
  闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数
  ☆507Jan 12, 2026Updated 8 months ago
• tarihub / blackjump

  View on GitHub
  JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
  ☆273Jun 6, 2025Updated last year
• ImCoriander / ZeroEye

  View on GitHub
  自动化找白文件，用于扫描 EXE 文件的导入表，列出导入的DLL文件，并筛选出非系统DLL，符合条件的文件将被复制到特定的 X64 或 X86 文件夹
  ☆640Mar 24, 2026Updated 5 months ago
• Drac0nids / FineReportExploit

  View on GitHub
  基于go语言的帆软报表漏洞检测工具
  ☆13Sep 4, 2022Updated 4 years ago
• myzxcg / NoNameExploit

  View on GitHub
  集权利用工具
  ☆164Feb 28, 2025Updated last year
• DeEpinGh0st / MDUT-Extend-Release

  View on GitHub
  MDUT-Extend(扩展版本)
  ☆951Aug 21, 2026Updated 3 weeks ago
• qigpig / Ghosting-BOF

  View on GitHub
  主要用于隐藏进程真实路径，进程带windows真签名
  ☆117Oct 15, 2024Updated last year
• wa1ki0g / NoAuth

  View on GitHub
  java-web 自动化鉴权绕过
  ☆379Apr 3, 2025Updated last year
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• 0xchang / DockerApiRCE

  View on GitHub
  DockerApiRCE
  ☆239Oct 22, 2024Updated last year
• qi4L / yongyouScan-go

  View on GitHub
  用友漏洞批量检测
  ☆93Mar 26, 2024Updated 2 years ago
• Y3A / CVE-2023-28229

  View on GitHub
  ☆136Jan 8, 2024Updated 2 years ago
• novysodope / javaeasyscan

  View on GitHub
  javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手
  ☆277Jun 18, 2024Updated 2 years ago
• luelueking / Deserial_Sink_With_JDBC

  View on GitHub
  Some ReadObject Sink With JDBC
  ☆243May 8, 2024Updated 2 years ago
• berryalen02 / PECracker

  View on GitHub
  针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and…
  ☆285Aug 20, 2024Updated 2 years ago
• P001water / yuze

  View on GitHub
  A socksv5 proxy tool Written by CLang. 一款纯C实现的轻量内网穿透工具，支持正向，反向socks5代理隧道的搭建，支持跨平台使用。
  ☆474Mar 2, 2025Updated last year