A malicious LDAP server for JNDI injection attacks
☆53Apr 29, 2023Updated 3 years ago
Alternatives and similar repositories for JNDIExploit
Users that are interested in JNDIExploit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC of Spring AMQP Deserialization Vulnerability (CVE-2023-34050)☆13Jan 29, 2024Updated 2 years ago
- ☆18Jun 7, 2023Updated 3 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- ☆91Jul 22, 2026Updated last week
- ☆314Feb 27, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆125Jun 7, 2023Updated 3 years ago
- ☆525Sep 16, 2022Updated 3 years ago
- 用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等☆598Aug 19, 2023Updated 2 years ago
- 用友 nc 系列密码解密☆62Apr 7, 2023Updated 3 years ago
- Alibaba Nacos存在默认token.secret.key，导致远程攻击者可以绕过密钥认证接管Nacos☆19Mar 17, 2023Updated 3 years ago
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆564Feb 1, 2024Updated 2 years ago
- 一个高度可定制化的JNDI和Java反序列化利用工具☆476Jan 17, 2023Updated 3 years ago
- weblogic漏洞利用工具☆17Jul 16, 2020Updated 6 years ago
- impacket编程手册☆106Oct 13, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 通过jsp脚本扫描java web Filter/Servlet型内存马☆1,009Mar 9, 2023Updated 3 years ago
- Pty bind shell for golang 一款基于SSH协议的远控程序☆48Feb 23, 2022Updated 4 years ago
- Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul☆95Oct 30, 2023Updated 2 years ago
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆289Nov 20, 2023Updated 2 years ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,299May 10, 2026Updated 2 months ago
- A wrapper of ldap_shell.py module which in ntlmrelayx☆62Sep 22, 2022Updated 3 years ago
- 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY …☆839Sep 18, 2023Updated 2 years ago
- ☆340Jun 7, 2022Updated 4 years ago
- Java Js Engine Payloads All in one☆292Aug 21, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2020-4464 / CVE-2020-4450☆36Aug 24, 2021Updated 4 years ago
- Mssql利用工具☆279Aug 7, 2023Updated 2 years ago
- CVE-2022-22947注入哥斯拉内存马☆28Jun 21, 2023Updated 3 years ago
- 2023 各大 CTF 的比赛附件☆51May 7, 2023Updated 3 years ago
- 项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,901Jan 15, 2024Updated 2 years ago
- ZKar is a Java serialization protocol analysis tool implement in Go.☆653Apr 19, 2026Updated 3 months ago
- 一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.☆2,222Aug 21, 2025Updated 11 months ago
- 收集内存马打入方式☆509May 20, 2022Updated 4 years ago
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,481Apr 25, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- CVE-2022-22947 注入Godzilla内存马☆210Apr 26, 2022Updated 4 years ago
- 记录学习codeql的过程☆10Jan 27, 2022Updated 4 years ago
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆878Jun 24, 2024Updated 2 years ago
- IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）☆582Mar 10, 2025Updated last year
- command execute without 445 port☆59Feb 25, 2022Updated 4 years ago
- ☆96Nov 26, 2022Updated 3 years ago
- SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。☆968Aug 5, 2021Updated 4 years ago