打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
☆32Jan 3, 2020Updated 6 years ago
Alternatives and similar repositories for fastjson-blacklist
Users that are interested in fastjson-blacklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- solution to buggyLoader of 0CTF/TCTF 2021 Finals☆20Sep 27, 2021Updated 5 years ago
- Code go audit tool with ai☆22Jan 13, 2025Updated last year
- 个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。☆60Mar 25, 2020Updated 6 years ago
- ☆12Nov 16, 2020Updated 5 years ago
- Writeup and environment for XCTF2021Final-Dubbo☆44May 31, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 简单实现的 Java RASP☆36Oct 14, 2020Updated 6 years ago
- 利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊☆123Jul 17, 2020Updated 6 years ago
- h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.☆54Dec 12, 2021Updated 4 years ago
- Java agent without file 无文件的Java agent☆81Apr 7, 2022Updated 4 years ago
- Java version of Tomcat-AJP-EXP, for practice☆42Oct 13, 2020Updated 6 years ago
- Java After-Deserialization Attack☆79Apr 26, 2021Updated 5 years ago
- SUCTF iCloudMusic 源码及writeup☆10Oct 12, 2022Updated 4 years ago
- ☆71Mar 26, 2022Updated 4 years ago
- 护网杯 2018 WEB (4) easy_laravel☆12Aug 22, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 快速切换公司，家里，机房，客户公司等各种场景ip设置☆37Dec 15, 2017Updated 8 years ago
- 通过Web获取访客机器的hostname字段内容。☆64Oct 19, 2021Updated 4 years ago
- WALA 学习笔记☆14Aug 8, 2023Updated 3 years ago
- A simple JavaScript beautify tool☆28May 3, 2021Updated 5 years ago
- 炭火，渗透测试全流程工具☆23Sep 1, 2025Updated last year
- Fastjson Poc for 1.2.33~1.2.36 with bcel☆11Oct 27, 2020Updated 5 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆454Mar 24, 2022Updated 4 years ago
- 利用链、漏洞检测工具☆375Jul 31, 2024Updated 2 years ago
- [WIP] a simple UI for Vulhub☆16Jun 10, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆756Apr 14, 2021Updated 5 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆320Dec 9, 2021Updated 4 years ago
- Learning JAVA for Security☆33Jun 9, 2022Updated 4 years ago
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- Shiro_721 exp 纯手工实现Padding Oracle整个过程☆67Nov 20, 2019Updated 6 years ago
- 这个工具只是临时名称，我称他为端口隧道技术，解决隔离内网上线问题。☆78May 31, 2022Updated 4 years ago
- Java漏洞调试分析集合☆96Mar 11, 2024Updated 2 years ago
- ☆34Sep 19, 2022Updated 4 years ago
- 是一些比赛中的好题，加上自己出的一些。。。☆43Jul 10, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- fastjson_rce工具，不用搭建HTTP服务，不受JDK版本限制☆10Nov 25, 2019Updated 6 years ago
- ☆54Dec 29, 2021Updated 4 years ago
- java memory web shell extracting tool☆500May 17, 2021Updated 5 years ago
- 一个定制自己渗透测试的python框架☆14Jun 10, 2021Updated 5 years ago
- Several XStream gadgets ported from ysoserial☆33Sep 26, 2021Updated 5 years ago
- ☆131Jun 17, 2022Updated 4 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆55Sep 6, 2022Updated 4 years ago