Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
☆15Sep 22, 2021Updated 4 years ago
Alternatives and similar repositories for JSP-Webshells
Users that are interested in JSP-Webshells are comparing it to the libraries listed below
Sorting:
- 一款支持高度自定义的 Java 内存马生成工具☆14Aug 26, 2025Updated 6 months ago
- ysoserial for 1nhann☆11Sep 26, 2022Updated 3 years ago
- 通达OA OfficeTask udp 2397 端口远程代码执行RCE检测工具☆21Jun 13, 2025Updated 8 months ago
- 简单的多线程网站存活/异常扫描。读取xlsx中的url进行检测，将结果保存在每一行的末尾。☆10Nov 1, 2022Updated 3 years ago
- 此项目为su18大佬的仓库镜像，如有问题可发issuse删库☆14May 4, 2023Updated 2 years ago
- Cobalt Strike teamserver detection.☆16Apr 26, 2021Updated 4 years ago
- FastJsonAutoTypeBypass☆16Apr 14, 2021Updated 4 years ago
- burpplugin 根据一遍神贴，实现了一下burp插件版本的小刀，一键生成shell☆14Jul 15, 2019Updated 6 years ago
- jre8u20 gadget☆34May 23, 2021Updated 4 years ago
- Java JDK 8-18 CodeQL databases☆17Jun 2, 2024Updated last year
- tsh多终端代理通信☆19Feb 26, 2025Updated last year
- 扫描常见未授权访问(改)（redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop）☆15Aug 4, 2020Updated 5 years ago
- Topic: The Swiss Army Knife of Java Exploitation☆21Feb 25, 2025Updated last year
- ☆17May 29, 2018Updated 7 years ago
- A script for installing and switching multiple java versions on Linux x86_64, suitable for code audit workers.☆21Mar 2, 2024Updated 2 years ago
- ☆26Nov 8, 2024Updated last year
- Cross Compatible Command and Control☆47Dec 18, 2025Updated 2 months ago
- The script checks Jenkins endpoints for CVE-2024-43044 by retrieving the Jenkins version from the innstance and comparing it against know…☆19Aug 8, 2024Updated last year
- Extract website information from Vue☆285Aug 29, 2023Updated 2 years ago
- 爆破字典☆20Nov 15, 2017Updated 8 years ago
- By manipulating LSASS memory flags like UseLogonCredential and IsCredGuardEnabled, this repo demonstrates how Credential Guard can be byp…☆14May 25, 2025Updated 9 months ago
- ☆55Dec 29, 2021Updated 4 years ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Jun 14, 2024Updated last year
- Zerologon自动化脚本☆97Sep 20, 2023Updated 2 years ago
- 分享在建设安全管理体系、ISO27001、等级保护、安全评审过程中的点点滴滴☆23Aug 27, 2018Updated 7 years ago
- A tool specifically designed for Kubernetes environments aims to efficiently and automatically discover hidden vulnerable APIs within clu…☆104May 20, 2025Updated 9 months ago
- Proxy function calls through the thread pool with ease☆31Feb 27, 2025Updated last year
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆28Sep 8, 2021Updated 4 years ago
- JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring☆651Jun 25, 2021Updated 4 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆103Aug 15, 2023Updated 2 years ago
- ☆50Jul 9, 2025Updated 7 months ago
- FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…☆43Apr 6, 2025Updated 10 months ago
- A hooking library with a MinHook-like API and a Detours-like implementation, with support for the x86, x64, and ARM64 platforms☆37Dec 10, 2025Updated 2 months ago
- 通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩，可以做一些破解、加密验证的绕过等操作☆116Jun 18, 2024Updated last year
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆123Oct 12, 2024Updated last year
- Get password/cookie/history from browser and use devtools protocol to bypass edr monitoring☆63Apr 22, 2025Updated 10 months ago
- 检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare☆79Oct 23, 2023Updated 2 years ago
- idea插件，快速生成反序列化中常用的方法，比如setFieldValue、createTemplatesImpl等☆29Oct 2, 2024Updated last year
- ☆27Jun 7, 2022Updated 3 years ago