tarihub / offlinepostLinks
读过的安全文章离线归档 | begin in 2023.11.23
☆16Updated last year
Alternatives and similar repositories for offlinepost
Users that are interested in offlinepost are comparing it to the libraries listed below
Sorting:
- JDBC Attack Tricks☆142Updated last year
- ☆56Updated last year
- A Java Route Collection Tool☆97Updated 11 months ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑,实现 2 3 字节加密序列化数组☆125Updated last year
- 在学习过程中的一些记录☆20Updated 2 weeks ago
- JavaSec☆34Updated last year
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆95Updated 8 months ago
- ☆73Updated 10 months ago
- 之前方便自己研究RASP原理和绕过时顺手写的,用于快速启动和重置RASP环境☆67Updated 9 months ago
- 支持Tomcat内存马查杀的JSP脚本☆40Updated last month
- 6万字奶爸级WebGoat8.X代码审计大全,全文均可复现,适合刚学完JAVASE准备开始代码审计的师傅🌟☆74Updated last week
- 强化学习 + 端口扫描☆122Updated 4 months ago
- CVE-2023-46604☆28Updated last year
- EndpointSearch 是一个探测云服务端点的扫描器。Endpoint Search is a sophisticated reconnaissance utility designed to discreetly identify and enumerate end…☆74Updated 8 months ago
- 利用代理驱动绕过JDBC Attack检测☆118Updated last month
- 多组件客户端☆73Updated 2 months ago
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆62Updated last week
- MySQL Honeypot☆22Updated 5 months ago
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆195Updated last year
- 2023 各大 CTF 的比赛附件☆49Updated 2 years ago
- java实现反序列化建立socket连接☆60Updated 6 months ago
- 该项目收集了很多厂商产品CMS的漏洞环境,以web为主。漏洞环境主要以Dockerfile的文件形式呈现,用户只需一键启动相应漏斗环境,使用项目文章中提供的poc,便可进行复现。☆65Updated 2 months ago
- CVE-2023-38646 Metabase RCE☆53Updated last year
- 一个集合了多种语言的实战化Web靶场 | A practical Web shooting range that integrates multiple languages☆73Updated 4 months ago
- 基于Agent技术实现的Java内存马查杀、防护工具。☆85Updated 11 months ago
- JDK CVE-2023-21939☆96Updated last year
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆51Updated last year
- ☆28Updated last year
- 使用 agent 实现反序列化 utf8 overlong☆79Updated last year
- 这是一个用Go编写的红队内网环境中一个能快速开启HTTP文件浏览服务的小工具,能够执行shell命令,可以执行webshell☆78Updated 2 years ago