threedr3am / fastjson-blacklistView external linksLinks
打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。
☆32Jan 3, 2020Updated 6 years ago
Alternatives and similar repositories for fastjson-blacklist
Users that are interested in fastjson-blacklist are comparing it to the libraries listed below
Sorting:
- Code go audit tool with ai☆23Jan 13, 2025Updated last year
- solution to buggyLoader of 0CTF/TCTF 2021 Finals☆20Sep 27, 2021Updated 4 years ago
- 个人用于在自动化挖掘gadget时,方便查找gadget chains中class所在jar包,以助于便捷审计测试gadget有效性的那么一个小工具。☆60Mar 25, 2020Updated 5 years ago
- Writeup and environment for XCTF2021Final-Dubbo☆44May 31, 2021Updated 4 years ago
- 简单实现的 Java RASP☆35Oct 14, 2020Updated 5 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆125Jul 17, 2020Updated 5 years ago
- 通过Web获取访客机器的hostname字段内容。☆65Oct 19, 2021Updated 4 years ago
- Java agent without file 无文件的Java agent☆82Apr 7, 2022Updated 3 years ago
- ☆12Nov 16, 2020Updated 5 years ago
- 快速切换公司,家里,机房,客户公司等各种场景ip设置☆37Dec 15, 2017Updated 8 years ago
- Java version of Tomcat-AJP-EXP, for practice☆42Oct 13, 2020Updated 5 years ago
- 炭火,渗透测试全流程工具☆24Sep 1, 2025Updated 5 months ago
- Learning JAVA for Security☆34Jun 9, 2022Updated 3 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆753Apr 14, 2021Updated 4 years ago
- 热门框架/组件/服务漏洞的描述/利用/修复☆12Apr 13, 2023Updated 2 years ago
- 是一些比赛中的好题,加上自己出的一些。。。☆43Jul 10, 2022Updated 3 years ago
- Fastjson Poc for 1.2.33~1.2.36 with bcel☆11Oct 27, 2020Updated 5 years ago
- SUCTF iCloudMusic 源码及writeup☆10Oct 12, 2022Updated 3 years ago
- fastjson_rce工具,不用搭建HTTP服务,不受JDK版本限制☆10Nov 25, 2019Updated 6 years ago
- A simple JavaScript beautify tool☆28May 3, 2021Updated 4 years ago
- 所有碰到过的默认口令☆107Mar 22, 2024Updated last year
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- ☆55Dec 29, 2021Updated 4 years ago
- ☆72Mar 26, 2022Updated 3 years ago
- 二进制安全学习笔记☆26Jan 8, 2022Updated 4 years ago
- Java After-Deserialization Attack☆79Apr 26, 2021Updated 4 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆320Dec 9, 2021Updated 4 years ago
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用(添加了大量代码注释,适合大家进行源码学习)。也加入了挖掘Fastjson反序列化gadget chains和SQLInject(JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等)静…☆458Mar 24, 2022Updated 3 years ago
- 一个定制自己渗透测试的python框架☆14Jun 10, 2021Updated 4 years ago
- 这个工具只是临时名称,我称他为端口隧道技术,解决隔离内网上线问题。☆78May 31, 2022Updated 3 years ago
- Several XStream gadgets ported from ysoserial☆33Sep 26, 2021Updated 4 years ago
- 微信公众号文章爬虫☆28Apr 5, 2020Updated 5 years ago
- java memory web shell extracting tool☆497May 17, 2021Updated 4 years ago
- 记录学习codeql的过程☆394Jun 9, 2023Updated 2 years ago
- 记录调试分析ysoserial系列的学习过程,主要包含手动构造的一些poc,便于加深对漏洞和工具的理解☆30Jun 15, 2020Updated 5 years ago
- Hide your tcp connection!!!☆12Apr 8, 2020Updated 5 years ago
- VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本☆11Feb 25, 2021Updated 4 years ago
- 护网杯 2018 WEB (4) easy_laravel☆12Aug 22, 2019Updated 6 years ago