threedr3am / dubbo-exp
dubbo快速利用exp,基本上老版本覆盖100%。
☆102Updated last year
Alternatives and similar repositories for dubbo-exp:
Users that are interested in dubbo-exp are comparing it to the libraries listed below
- fastjson 80 远程代码执行漏洞复现☆191Updated 2 years ago
- Java表达式语句生成器☆184Updated last year
- 在原有yso基础上实现依赖分离,内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆68Updated 3 years ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆78Updated 2 years ago
- Java漏洞分析汇合☆142Updated 3 years ago
- Apache Dubbo漏洞测试Demo及其POC☆61Updated 2 years ago
- A malicious LDAP server for JNDI injection attacks☆52Updated last year
- Java命令行文件监控小工具(代码审计)☆101Updated 3 years ago
- ☆81Updated 3 years ago
- 一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。☆166Updated last year
- 支持自动化的切换请求方式、自动化的请求重试、以完整的扫描Springboot路径☆3Updated 3 years ago
- 基于dbcp的fastjson rce 回显☆191Updated 3 years ago
- springboot跨线程注入内存马☆116Updated 2 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆163Updated 2 years ago
- Shiro-721 Padding Oracle Attack☆71Updated 3 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案(修改为使用ceye接收请求,添加自定义DNS服务器)☆289Updated last year
- 一个Spring4Shell 被动式检测的Burp插件☆93Updated 2 years ago
- 自己积累的一些Java反序列化利用链☆87Updated 2 years ago
- 获取 alibaba druid 一些 sessions , sql , urls☆263Updated 2 years ago
- fastjson不出网利用、c3p0☆251Updated 3 years ago
- ☆107Updated 3 years ago
- 一款探测fastjson漏洞的BurpSuite插件☆61Updated 3 years ago
- xxl-job未授权命令执行☆107Updated 3 years ago
- Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit☆80Updated last year
- ☆68Updated 3 years ago
- XxlJob<=2.1.2配置不当情况下反序列化RCE☆92Updated 4 years ago
- Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit☆103Updated last year
- A Go library for generating Java deserialization payloads.☆155Updated 6 months ago
- Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg☆133Updated 4 years ago
- woodpecker框架weblogic信息探测插件☆179Updated 3 years ago