用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
☆95Nov 4, 2020Updated 5 years ago
Alternatives and similar repositories for WebLogic_Basic_Poc
Users that are interested in WebLogic_Basic_Poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆271Mar 4, 2022Updated 4 years ago
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆70Dec 14, 2020Updated 5 years ago
- WebLogic利用CVE-2020-2883 打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell☆529Aug 25, 2020Updated 6 years ago
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- POC of CVE-2021-2394☆40Oct 28, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Shiro-550 不依赖CC链利用工具☆447Jun 19, 2024Updated 2 years ago
- 利用云函数实现端口扫描☆15Nov 17, 2025Updated 11 months ago
- Weblogic IIOP CVE-2020-2551☆337Apr 7, 2020Updated 6 years ago
- Shiro反序列化回显利用、内存shell、检查 Burp插件☆214Sep 1, 2022Updated 4 years ago
- SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE☆231Dec 5, 2020Updated 5 years ago
- TaiO 的定位是一款用于攻击方对靶标资产梳理，快速定位脆弱资产的网络空间测绘工具☆75Mar 9, 2022Updated 4 years ago
- Log4j_dos_CVE-2021-45105☆13Dec 19, 2021Updated 4 years ago
- Some payloads of JNDI Injection in JDK 1.8.0_191+☆486Dec 9, 2020Updated 5 years ago
- 内网域渗透小工具☆732Apr 20, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 记录weblogic的一些漏洞原理☆17Nov 4, 2021Updated 4 years ago
- 基于向日葵RCE的本地权限提升，无需指定端口☆211Feb 24, 2022Updated 4 years ago
- ☆69Aug 11, 2020Updated 6 years ago
- Fastjson <= 1.2.47 远程命令执行漏洞利用工具及方法☆398Jan 24, 2025Updated last year
- CVE-2020-10199 回显版本☆31Jun 24, 2024Updated 2 years ago
- Sample Spring application to Demonstrate the Gateway Actuator☆49Mar 3, 2022Updated 4 years ago
- CVE-2022-22947☆222Mar 3, 2022Updated 4 years ago
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆214May 19, 2020Updated 6 years ago
- 用cel-go重现了长亭xray的poc检测功能的轮子☆298Jun 24, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆725Mar 21, 2022Updated 4 years ago
- ☆84Nov 20, 2021Updated 4 years ago
- 用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密☆250Aug 26, 2020Updated 6 years ago
- Yapi RCE漏洞批量验证与伪交互SHELL☆42Jul 9, 2021Updated 5 years ago
- exchange-ssrf-rce☆79Mar 14, 2021Updated 5 years ago
- ☆285Jan 15, 2020Updated 6 years ago
- 一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。☆289Mar 14, 2021Updated 5 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆756Apr 14, 2021Updated 5 years ago
- 搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。☆831Nov 7, 2023Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- fastjson 1.2.68 版本 autotype bypass☆139Aug 9, 2026Updated 2 months ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆355Mar 12, 2020Updated 6 years ago
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆709May 10, 2021Updated 5 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,395Jan 18, 2022Updated 4 years ago
- 总结了20+.Net反序列化文章，持续更新☆744Apr 3, 2024Updated 2 years ago
- 一个简陋的分布式子域名扫描轮子☆17Dec 8, 2022Updated 3 years ago
- A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …☆270Oct 17, 2025Updated last year