sunird / shiro_exp
shiro_rememberme 反序列化漏洞 利用EXP
☆30Updated 5 years ago
Alternatives and similar repositories for shiro_exp:
Users that are interested in shiro_exp are comparing it to the libraries listed below
- Apache Solr远程代码执行漏洞(CVE-2019-0193) Exploit☆64Updated 4 years ago
- 可以直接反弹shell☆47Updated 2 years ago
- Shiro_721 exp 纯手工实现Padding Oracle整个过程☆67Updated 5 years ago
- sqlmap分块传输代理☆49Updated 5 years ago
- 子域名后续的信息收集工具☆29Updated 5 years ago
- 通过burp代理流量寻找shiro站点☆60Updated 4 years ago
- 禅道8.2 - 9.2.1前台Getshell☆78Updated 5 years ago
- Web ExternalC2 Demo☆51Updated 4 years ago
- CommonsBeanutils1,CommonsCollectionsK1☆58Updated 4 years ago
- 一个为PentestBox添加搜索工具名称功能的py脚本☆13Updated 4 years ago
- flash 劫持轮子，CSRF，劫持，跳转，swf 有需求可以提issues ，src挖掘,劫持response☆86Updated 5 years ago
- 资产扫描工具☆46Updated 4 years ago
- 宽字节安全团队的博客☆30Updated 4 years ago
- xray社区高级版证书生成，支持到 1.2.0 版本☆35Updated 4 years ago
- ☆41Updated 4 years ago
- webuploader-v-0.1.15未授权-任意文件上传☆51Updated 5 years ago
- CNVD-C-2019-48814 Weblogic wls9_async_response 反序列化利用工具☆37Updated 5 years ago
- autoType enable☆36Updated 5 years ago
- 注入检测工具☆45Updated 5 years ago
- CVE-2020-2551 POC to use in Internet☆21Updated 4 years ago
- 一个可快速“搬运”cookie的Burp Suite插件☆25Updated 7 years ago
- Shiro RememberMe 1.2.4 反序列化 漏洞☆53Updated 5 years ago
- 此脚本用于测试 Rdies 未授权访问，在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下， 进行WEB目录探测☆73Updated 5 years ago
- 过各waf注入上传等☆26Updated 7 years ago
- ☆41Updated 4 years ago
- Java version of Tomcat-AJP-EXP, for practice☆42Updated 4 years ago
- fastjson-1.2.61-RCE☆33Updated 5 years ago
- python3 写的一些权限维持脚本☆34Updated 5 years ago
- 一款用于攻击spring boot actuator的集成环境，目前集成三种攻击方式，支持1.x、2.x☆86Updated 3 years ago
- 简单的分离免杀demo☆42Updated 3 years ago