tangxiaofeng7 / CVE-2022-22965-Spring-Core-Rce

Related projects: ⓘ

• ssrsec / SpringBootEnvDecrypt
  SpringBoot获取被星号脱敏的密码的明文
  ☆57Updated 2 years ago
• 7ten7 / WorkflowServiceXml-Exploit
  ☆31Updated 3 years ago
• LostZX / Kakaka
  ☆23Updated this week
• chroblert / JC-AntiToken
  burp插件：python版，token防重放绕过
  ☆19Updated 3 years ago
• i11us0ry / tools-gophish
  gophish批量操作，适用于大批量钓鱼演练
  ☆29Updated 3 years ago
• Dghpi9 / NacosDefaultToken
  Alibaba Nacos存在默认token.secret.key，导致远程攻击者可以绕过密钥认证接管Nacos
  ☆18Updated last year
• kai1025 / seeyonExp
  ☆33Updated this week
• Bywalks / SSH_Spider
  ☆45Updated this week
• Wrin9 / weaverOA_v9_ALL_upload_RCE
  泛微OA_V9全版本前台任意文件上传漏洞
  ☆29Updated 2 years ago
• dream0x01 / shiro-framework
  ☆37Updated this week
• JaneMandy / ThinkPHP_RCE
  一款综合漏洞利用工具箱。
  ☆52Updated 2 years ago
• r00tSe7en / log4jScan_Modify
  对接JNDIMonitor的Burp Suite被动扫描插件
  ☆23Updated 2 years ago
• Weik1 / scan_screenshot
  golang写的批量对目标网站进行截图的小工具，适合目标资产比较多时，快速定位薄弱点。
  ☆32Updated last year
• tangxiaofeng7 / Spring-Cloud-Function-Spel
  Spring Cloud Function Spel命令执行漏洞
  ☆38Updated 2 years ago
• Ryze-T / rust-addUser
  windows 添加管理员--Rust版本
  ☆41Updated 2 years ago
• z1un / NC-BeanShell-RCE
  CNVD-2021-30167 用友NC BeanShell远程代码执行
  ☆31Updated 3 years ago
• sp4zcmd / Ruoyi-All
  若依后台定时任务一键利用
  ☆17Updated 2 years ago
• Lotus6 / SpringExploit
  Spring core bean 日志 getshell 和 Spring Cloud Function SpEL 命令执行。
  ☆35Updated 2 years ago
• rambleZzz / jmxbfGUI
  jmx未授权访问 弱口令批量检测 GUI工具
  ☆31Updated last year
• keven1z / CVE-2021-22205
  CVE-2021-22205 检测脚本,支持getshell和命令执行
  ☆12Updated 2 years ago
• hackerxj007 / Behinder4.0.2-plus
  冰蝎4.0.2,杀软识别,辅助功能,权限维持
  ☆32Updated last year
• bravery9 / ShiroExploit
  ShiroExploit 是一款 Shiro 可视化利用工具，集成密钥爆破，命令回显内存马注入等功能
  ☆23Updated 3 years ago
• chaosec2021 / FCKeditor-2.4.3--exp
  ☆17Updated this week
• j5s / FscanX
  A Large killer focused on intranet scanning
  ☆28Updated 3 years ago
• Ghost2097221 / GarBageTools-public
  ☆19Updated this week
• wikiZ / service_cobaltstrike
  CobaltStrike profile by 风起
  ☆39Updated 2 years ago
• winezer0 / Browser-Brute
  浏览器模拟爆破,支持CSS选择器
  ☆18Updated last year
• 4nth0ny1130 / shisoserial
  一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.
  ☆23Updated 2 years ago
• mieeA / SpringWebflux-MemShell
  ☆51Updated this week
• lishang520 / CVE-2022-24990
  CVE-2022-24990信息泄露+RCE 一条龙
  ☆39Updated 2 years ago