A malicious LDAP server for JNDI injection attacks
☆53Apr 29, 2023Updated 3 years ago
Alternatives and similar repositories for JNDIExploit
Users that are interested in JNDIExploit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC of Spring AMQP Deserialization Vulnerability (CVE-2023-34050)☆13Jan 29, 2024Updated 2 years ago
- ☆18Jun 7, 2023Updated 3 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- tp3注入总结☆19Jan 6, 2022Updated 4 years ago
- command execute without 445 port☆58Feb 25, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆318Feb 27, 2025Updated last year
- 用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等☆598Aug 19, 2023Updated 3 years ago
- NTLM/Negotiate authentication over HTTP that supports Pass The Hash Mode (PtH)☆17Sep 13, 2024Updated 2 years ago
- ☆521Sep 16, 2022Updated 4 years ago
- ☆92Jul 22, 2026Updated 3 months ago
- ☆124Jun 7, 2023Updated 3 years ago
- 一个高度可定制化的JNDI和Java反序列化利用工具☆472Jan 17, 2023Updated 3 years ago
- 用友 nc 系列密码解密☆62Apr 7, 2023Updated 3 years ago
- Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入☆569Feb 1, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）☆1,808Nov 1, 2023Updated 3 years ago
- Java Js Engine Payloads All in one☆288Aug 21, 2023Updated 3 years ago
- Pty bind shell for golang 一款基于SSH协议的远控程序☆48Feb 23, 2022Updated 4 years ago
- A wrapper of ldap_shell.py module which in ntlmrelayx☆62Sep 22, 2022Updated 4 years ago
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,054Oct 7, 2022Updated 4 years ago
- 通过jsp脚本扫描java web Filter/Servlet型内存马☆1,017Mar 9, 2023Updated 3 years ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,332Oct 30, 2026Updated last week
- Alibaba Nacos存在默认token.secret.key，导致远程攻击者可以绕过密钥认证接管Nacos☆18Mar 17, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,483Apr 25, 2024Updated 2 years ago
- 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见 的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY …☆831Sep 18, 2023Updated 3 years ago
- weblogic漏洞利用工具☆17Jul 16, 2020Updated 6 years ago
- 项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。☆1,890Jan 15, 2024Updated 2 years ago
- Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul☆93Oct 30, 2023Updated 3 years ago
- ZKar is a Java serialization protocol analysis tool implement in Go.☆656Apr 19, 2026Updated 6 months ago
- 一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.☆2,228Aug 21, 2025Updated last year
- impacket programming manual and tutorial — write your own AD PoC with Kerberos/RPC/DCOM/WMI source-level guides (中英双语+PDF)☆113Oct 1, 2026Updated last month
- ☆339Jun 7, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 3 years ago
- Mssql利用工具☆278Aug 7, 2023Updated 3 years ago
- 替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆147Mar 13, 2022Updated 4 years ago
- ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。☆779May 26, 2026Updated 5 months ago
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆888Jun 24, 2024Updated 2 years ago
- SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。☆973Aug 5, 2021Updated 5 years ago
- CrackMapExec extension module/protocol support☆43Sep 12, 2023Updated 3 years ago