rufherg/WebLogic_Basic_Poc external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

rufherg/WebLogic_Basic_Poc

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/rufherg/WebLogic_Basic_Poc)

Close

rufherg / WebLogic_Basic_PocView on GitHubMore

• External links
• Readme badge

用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库

☆94Nov 4, 2020Updated 5 years ago

Alternatives and similar repositories for WebLogic_Basic_Poc

Users that are interested in WebLogic_Basic_Poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆270Mar 4, 2022Updated 4 years ago
• EvilPulsar / S2-061

  View on GitHub
  some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute
  ☆70Dec 14, 2020Updated 5 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆535Aug 25, 2020Updated 5 years ago
• Firebasky / GoRmi

  View on GitHub
  该项目是通过go语言实现防止rmi利用被反置的问题。
  ☆44Dec 30, 2021Updated 4 years ago
• LFYSec / ActuatorExploit

  View on GitHub
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆230Dec 5, 2020Updated 5 years ago
• binganao / TaiO

  View on GitHub
  TaiO 的定位是一款用于攻击方对靶标资产梳理，快速定位脆弱资产的网络空间测绘工具
  ☆75Mar 9, 2022Updated 4 years ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆450Jun 19, 2024Updated last year
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• wdahlenburg / spring-gateway-demo

  View on GitHub
  Sample Spring application to Demonstrate the Gateway Actuator
  ☆48Mar 3, 2022Updated 4 years ago
• safe6Sec / WeblogicVuln

  View on GitHub
  记录weblogic的一些漏洞原理
  ☆16Nov 4, 2021Updated 4 years ago
• lz2y / CVE-2021-2394

  View on GitHub
  POC of CVE-2021-2394
  ☆40Oct 28, 2021Updated 4 years ago
• potats0 / cve_2020_14644

  View on GitHub
  ☆69Aug 11, 2020Updated 5 years ago
• cckuailong / Log4j_dos_CVE-2021-45105

  View on GitHub
  Log4j_dos_CVE-2021-45105
  ☆13Dec 19, 2021Updated 4 years ago
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆484Dec 9, 2020Updated 5 years ago
• jeningogo / exchange-ssrf-rce

  View on GitHub
  exchange-ssrf-rce
  ☆78Mar 14, 2021Updated 5 years ago
• aleenzz / CVE-2020-10199

  View on GitHub
  CVE-2020-10199 回显版本
  ☆31Jun 24, 2024Updated last year
• Y4er / CVE-2020-2551

  View on GitHub
  Weblogic IIOP CVE-2020-2551
  ☆338Apr 7, 2020Updated 5 years ago
• QAX-A-Team / HideShell

  View on GitHub
  A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.
  ☆216Mar 31, 2019Updated 6 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• yumusb / Yapi_Rce

  View on GitHub
  Yapi RCE漏洞批量验证与伪交互SHELL
  ☆42Jul 9, 2021Updated 4 years ago
• bigsizeme / shiro-check

  View on GitHub
  Shiro反序列化回显利用、内存shell、检查 Burp插件
  ☆217Sep 1, 2022Updated 3 years ago
• SkewwG / domainTools

  View on GitHub
  内网域渗透小工具
  ☆733Apr 20, 2021Updated 4 years ago
• Richard-Tang / x1DecoderPlus

  View on GitHub
  AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell
  ☆163Sep 28, 2021Updated 4 years ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆441Sep 10, 2021Updated 4 years ago
• An0nySec / ShadowUser

  View on GitHub
  影子用户 克隆
  ☆233Dec 30, 2021Updated 4 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆753Apr 14, 2021Updated 4 years ago
• firstC99 / fastjson-1.2.47-RCE

  View on GitHub
  Fastjson <= 1.2.47 远程命令执行漏洞利用工具及方法
  ☆400Jan 24, 2025Updated last year
• uknowsec / SharpNetCheck

  View on GitHub
  ☆286Jan 15, 2020Updated 6 years ago
• jiangsir404 / POC-S

  View on GitHub
  POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC
  ☆357Mar 12, 2020Updated 6 years ago
• jjf012 / gopoc

  View on GitHub
  用cel-go重现了长亭xray的poc检测功能的轮子
  ☆297Jun 24, 2022Updated 3 years ago
• Ryze-T / CNVD-2022-10270-LPE

  View on GitHub
  基于向日葵RCE的本地权限提升，无需指定端口
  ☆210Feb 24, 2022Updated 4 years ago
• Artemis1029 / Java_xmlhack

  View on GitHub
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆166Apr 5, 2019Updated 6 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms

  View on GitHub
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆311Jun 17, 2022Updated 3 years ago
• GuoKerS / domain_scan_demo

  View on GitHub
  一个简陋的分布式子域名扫描轮子
  ☆17Dec 8, 2022Updated 3 years ago
• A-D-Team / attackRmi

  View on GitHub
  ☆231Jan 3, 2022Updated 4 years ago
• sf197 / GetPwd

  View on GitHub
  用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密
  ☆250Aug 26, 2020Updated 5 years ago
• Lonely-night / fastjsonVul

  View on GitHub
  fastjson 80 远程代码执行漏洞复现
  ☆199Sep 7, 2022Updated 3 years ago
• pmiaowu / RMITest

  View on GitHub
  就是一个练习RMI反序列化的最简单环境
  ☆30Jan 8, 2022Updated 4 years ago
• lucksec / Spring-Cloud-Gateway-CVE-2022-22947

  View on GitHub
  CVE-2022-22947
  ☆222Mar 3, 2022Updated 4 years ago