批量检测log4j漏洞，主要还是批量fuzzz 头
☆33Dec 12, 2021Updated 4 years ago
Alternatives and similar repositories for log4j-fuzz-head-poc
Users that are interested in log4j-fuzz-head-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Log4j 多线程批量检测利用工具☆210Dec 14, 2021Updated 4 years ago
- 用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件☆208Apr 18, 2023Updated 3 years ago
- Log4j2 RCE Passive Scanner plugin for BurpSuite☆833Aug 4, 2023Updated 3 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆776Jan 26, 2022Updated 4 years ago
- Log4j jndi injection fuzz tool☆69Dec 24, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 360 QuakeAPI批量查询工具☆16Jul 20, 2021Updated 5 years ago
- Bypass AV 用户添加☆167Dec 30, 2021Updated 4 years ago
- 一个Spring4Shell 被动式检测的Burp插件☆92Apr 8, 2022Updated 4 years ago
- 一个LDAP请求监听器，摆脱dnslog平台☆288Apr 7, 2023Updated 3 years ago
- fastjson 被动扫描、不出网payload生成☆368Nov 19, 2021Updated 4 years ago
- nim一键免杀☆215Mar 8, 2021Updated 5 years ago
- Command2API - 万物皆可API☆253Mar 10, 2022Updated 4 years ago
- 红队工具：各大OA利用工具，万户、致远、通达等☆259Jul 23, 2021Updated 5 years ago
- 帆软/致远密码解密工具☆362Jul 29, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密☆250Aug 26, 2020Updated 6 years ago
- CVE-2022-24990信息泄露+RCE 一条龙☆38Mar 29, 2022Updated 4 years ago
- 关于安全狗和云锁的自动化绕过脚本☆520Nov 15, 2021Updated 4 years ago
- CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks☆841Jun 13, 2023Updated 3 years ago
- 一个全新的敏感文件发现工具☆225Jan 10, 2021Updated 5 years ago
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 5 years ago
- GoScan是采用Golang语言编写的一款分布式综合 资产管理系统，适合红队、SRC等使用☆711May 6, 2021Updated 5 years ago
- 大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）☆914Feb 8, 2022Updated 4 years ago
- lite version of gobuster. Only subdomain brute. 内网轻量化子域名爆破工具☆44Jun 25, 2021Updated 5 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 破产版免杀☆51Oct 2, 2021Updated 5 years ago
- fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。☆126May 14, 2021Updated 5 years ago
- 各种工具指纹收集分享☆527Nov 3, 2021Updated 4 years ago
- SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE☆231Dec 5, 2020Updated 5 years ago
- 高危漏洞精准检测与深度利用框架☆1,463Jan 8, 2023Updated 3 years ago
- 一款基于BurpSuite的被动式FastJson检测插件☆1,260Oct 1, 2022Updated 4 years ago
- Bypass firewall for traffic forwarding using webshell☆1,426Sep 29, 2021Updated 5 years ago
- 一个全新的敏感文件发现工具☆269Jan 5, 2021Updated 5 years ago
- BurpBounty 魔改版本☆416Mar 21, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Coremail任意文件上传漏洞POC☆158Apr 11, 2021Updated 5 years ago
- Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload☆893May 28, 2021Updated 5 years ago
- 项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,892Jan 15, 2024Updated 2 years ago
- Redis-Attack By Replication (通过主从复制攻击Redis)☆362Nov 25, 2022Updated 3 years ago
- ☆294May 7, 2022Updated 4 years ago
- 数据库综合利用工具☆544Feb 16, 2022Updated 4 years ago
- ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。☆1,655Jun 16, 2024Updated 2 years ago