threedr3am / dubbo-exp
dubbo快速利用exp,基本上老版本覆盖100%。
☆105Updated last year
Alternatives and similar repositories for dubbo-exp:
Users that are interested in dubbo-exp are comparing it to the libraries listed below
- fastjson 80 远程代码执行漏洞复现☆192Updated 2 years ago
- Java表达式语句生成器☆186Updated last year
- 一个Spring4Shell 被动式检测的Burp插件☆93Updated 3 years ago
- Apache Dubbo漏洞测试Demo及其POC☆61Updated 2 years ago
- 在原有yso基础上实现依赖分离,内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆68Updated 3 years ago
- Java漏洞分析汇合☆142Updated 3 years ago
- springboot跨线程注入内存马☆117Updated 3 years ago
- 支持自动化的切换请求方式、自动化的请求重试、以完整的扫描Springboot路径☆3Updated 3 years ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆167Updated last year
- ☆81Updated 3 years ago
- ☆117Updated last year
- 这是一个用于IP和域名碰撞匹配访问的小工具,旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。https://github.com/fofapro/Hosts_scan implement in Go☆113Updated 2 years ago
- 自己积累的一些Java反序列化利用链☆87Updated 2 years ago
- Java命令行文件监控小工具(代码审计)☆101Updated 3 years ago
- Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg☆134Updated 4 years ago
- Shiro-721 Padding Oracle Attack☆71Updated 3 years ago
- 自己的JNDI 利用工具,添加一些人性化功能☆130Updated 2 years ago
- cve-2020-1472 复现利用及其exp☆109Updated 4 years ago
- fastjson不出网利用、c3p0☆252Updated 3 years ago
- xxl-job未授权命令执行☆108Updated 3 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案(修改为使用ceye接收请求,添加自定义DNS服务器)☆290Updated last year
- XxlJob<=2.1.2配置不当情况下反序列化RCE☆93Updated 4 years ago
- Druid 密文解密工具☆131Updated 4 years ago
- 基于dbcp的fastjson rce 回显☆191Updated 3 years ago
- Spring Actuator端点的BurpSuite被动扫描插件。☆196Updated 2 years ago
- 备份文件扫描,并自动进行下载☆130Updated last year
- A malicious LDAP server for JNDI injection attacks☆52Updated last year
- woodpecker框 架weblogic信息探测插件☆180Updated 3 years ago
- Web Cache Poisoning Vulnerability Scanner☆37Updated 3 months ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆77Updated 2 years ago