A malicious LDAP server for JNDI injection attacks
☆53Apr 29, 2023Updated 3 years ago
Alternatives and similar repositories for JNDIExploit
Users that are interested in JNDIExploit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC of Spring AMQP Deserialization Vulnerability (CVE-2023-34050)☆13Jan 29, 2024Updated 2 years ago
- ☆19Jun 7, 2023Updated 3 years ago
- 一款支持自定义的 Java 回显载荷生成工具|A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- ☆312Feb 27, 2025Updated last year
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆91Sep 2, 2022Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆124Jun 7, 2023Updated 3 years ago
- ☆526Sep 16, 2022Updated 3 years ago
- 用友NC系列漏洞检测利用工具,支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等☆593Aug 19, 2023Updated 2 years ago
- Alibaba Nacos存在默认token.secret.key,导致远程攻击者可以绕过密钥认证接管Nacos☆19Mar 17, 2023Updated 3 years ago
- 用友 nc 系列密码解密☆62Apr 7, 2023Updated 3 years ago
- Confluence CVE 2021,2022,2023 利用工具,支持命令执行,哥斯拉,冰蝎 内存马注入☆558Feb 1, 2024Updated 2 years ago
- 一个高度可定制化的JNDI和Java反序列化利用工具☆474Jan 17, 2023Updated 3 years ago
- weblogic漏洞利用工具☆17Jul 16, 2020Updated 5 years ago
- 用java实现构造openwire协议,利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- impacket编程手册☆106Oct 13, 2023Updated 2 years ago
- 通过jsp脚本扫描java web Filter/Servlet型内存马☆1,005Mar 9, 2023Updated 3 years ago
- Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul☆94Oct 30, 2023Updated 2 years ago
- Pty bind shell for golang 一款基于SSH协议的远控程序☆48Feb 23, 2022Updated 4 years ago
- A wrapper of ldap_shell.py module which in ntlmrelayx☆62Sep 22, 2022Updated 3 years ago
- 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY …☆831Sep 18, 2023Updated 2 years ago
- Java Js Engine Payloads All in one☆292Aug 21, 2023Updated 2 years ago
- ☆341Jun 7, 2022Updated 4 years ago
- CVE-2020-4464 / CVE-2020-4450☆36Aug 24, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Mssql利用工具☆278Aug 7, 2023Updated 2 years ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具,致力于简化安全研究人员和红队成员的工作流程,提升攻防效率☆1,526Updated this week
- CVE-2022-22947注入哥斯拉内存马☆28Jun 21, 2023Updated 3 years ago
- 2023 各大 CTF 的比赛附件☆50May 7, 2023Updated 3 years ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,285May 10, 2026Updated last month
- ZKar is a Java serialization protocol analysis tool implement in Go.☆653Apr 19, 2026Updated 2 months ago
- CVE-2022-22947 注入Godzilla内存马☆211Apr 26, 2022Updated 4 years ago
- 收集内存马打入方式☆509May 20, 2022Updated 4 years ago
- 一款支持自定义的 Java 内存马生成工具|A customizable Java in-memory webshell generation tool.☆2,215Aug 21, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webs…☆1,476Apr 25, 2024Updated 2 years ago
- command execute without 445 port☆59Feb 25, 2022Updated 4 years ago
- IDEA代码审计辅助插件(深信服深蓝实验室天威战队强力驱动)☆583Mar 10, 2025Updated last year
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆878Jun 24, 2024Updated 2 years ago
- 记录学习codeql的过程☆10Jan 27, 2022Updated 4 years ago
- SharpSQLTools 和@Rcoil一起写的小工具,可上传下载文件,xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。☆966Aug 5, 2021Updated 4 years ago
- WeblogicTool,GUI漏洞利用工具,支持漏洞检测、命令执行、内存马注入、密码解密等(深信服深蓝实验室天威战队强力驱动)☆1,791Nov 1, 2023Updated 2 years ago