Alternatives and similar repositories for rwctf-2021-old-system

Users that are interested in rwctf-2021-old-system are comparing it to the libraries listed below

• LFYSec / XCTF2021Final-Dubbo

  View on GitHub
  Writeup and environment for XCTF2021Final-Dubbo
  ☆44May 31, 2021Updated 4 years ago
• ceclin / 0ctf-2021-finals-soln-buggy-loader

  View on GitHub
  solution to buggyLoader of 0CTF/TCTF 2021 Finals
  ☆20Sep 27, 2021Updated 4 years ago
• veracode-research / spring-view-manipulation

  View on GitHub
  When MVC magic turns black
  ☆296Sep 4, 2020Updated 5 years ago
• bash-c / rwctf2019-final-printer

  View on GitHub
  Writeup for rwctf2019-final-printer
  ☆14Dec 17, 2019Updated 6 years ago
• potats0 / javaSerializationTools

  View on GitHub
  ☆143Jan 21, 2021Updated 5 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆258Oct 14, 2020Updated 5 years ago
• Ruil1n / after-deserialization-attack

  View on GitHub
  Java After-Deserialization Attack
  ☆79Apr 26, 2021Updated 4 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 6 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 4 years ago
• chaitin / Real-World-CTF-3rd-Challenge-Attachments

  View on GitHub
  Challenge attachments for RWCTF 3rd.
  ☆91Jul 1, 2021Updated 4 years ago
• chaitin / Real-World-CTF-3rd-Forum-Attachments

  View on GitHub
  attachments for forum of RealWorld CTF 3rd
  ☆42Jan 7, 2021Updated 5 years ago
• BytecodeDL / soot-fact-generator

  View on GitHub
  generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)
  ☆23Nov 24, 2024Updated last year
• chaitin / Real-World-CTF-2019-Quals-Attachment

  View on GitHub
  ☆22Sep 17, 2019Updated 6 years ago
• SecCoder-Security-Lab / spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

  View on GitHub
  Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053
  ☆37Dec 15, 2022Updated 3 years ago
• iceyhexman / flask_memory_shell

  View on GitHub
  Flask 内存马
  ☆312Mar 26, 2021Updated 4 years ago
• 5lipper / ctf

  View on GitHub
  realworld ctf live stream
  ☆74Feb 4, 2024Updated 2 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• SycloverSecurity / SCTF2020

  View on GitHub
  SCTF2020
  ☆86Jul 10, 2020Updated 5 years ago
• paul-axe / ctf

  View on GitHub
  CTF stuff
  ☆40Dec 5, 2022Updated 3 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆458Mar 24, 2022Updated 3 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload

  View on GitHub
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Feb 8, 2020Updated 6 years ago
• Ramos-dev / R9000

  View on GitHub
  ☆57Apr 27, 2020Updated 5 years ago
• Ramos-dev / graph4code

  View on GitHub
  超硬核！使用图数据技术发现软件漏洞
  ☆185Sep 1, 2021Updated 4 years ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 6 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆255Jul 1, 2016Updated 9 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• threedr3am / log-agent

  View on GitHub
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆125Jul 17, 2020Updated 5 years ago
• 5wimming / gadgetinspector

  View on GitHub
  利用链、漏洞检测工具
  ☆373Jul 31, 2024Updated last year
• longofo / rmi-jndi-ldap-jrmp-jmx-jms

  View on GitHub
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆310Jun 17, 2022Updated 3 years ago
• BishopFox / GadgetProbe

  View on GitHub
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆613Mar 4, 2021Updated 4 years ago
• Anemone95 / taint-benchmark

  View on GitHub
  A benchmark to evaluate taint analysis
  ☆28Jun 20, 2022Updated 3 years ago
• meizjm3i / PHPVulFinder

  View on GitHub
  PHP Static Program Analysis
  ☆42Mar 29, 2023Updated 2 years ago
• BeichenDream / JDR

  View on GitHub
  ☆146Jan 16, 2023Updated 3 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,239Feb 17, 2025Updated 11 months ago
• HXSecurity / DongTai-agent-java

  View on GitHub
  Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…
  ☆696Dec 25, 2023Updated 2 years ago
• tabby-sec / tabby

  View on GitHub
  A CAT called tabby ( Code Analysis Tool )
  ☆1,634Jan 17, 2026Updated 3 weeks ago
• opensec-cn / chip

  View on GitHub
  a simple tool to detect potential security threat in php code
  ☆317Sep 9, 2024Updated last year
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,015Oct 15, 2020Updated 5 years ago
• fynch3r / WALAStudy

  View on GitHub
  WALA 学习笔记
  ☆14Aug 8, 2023Updated 2 years ago