welk1n / FastjsonPocs
一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。
☆56Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for FastjsonPocs
- CodeQL 寻找 JNDI利用 Lookup接口☆162Updated 2 years ago
- ☆51Updated 2 years ago
- ThinkPHP各版本反序列化利用代码☆32Updated 4 years ago
- ☆41Updated 5 years ago
- ☆39Updated 4 years ago
- 卸载冰蝎内存马☆68Updated 3 years ago
- cve-2020-1472 复现利用及其exp☆106Updated 4 years ago
- ☆81Updated 3 years ago
- Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …☆50Updated 2 years ago
- ☁️Tencent Cloud AccessKey tools☆16Updated 4 months ago
- ☆4Updated 4 years ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Updated 4 years ago
- ☆48Updated 3 years ago
- 基于SerializationDumper的Shiro Cookie序列化数据解密小工具☆52Updated 4 years ago
- ☆70Updated 4 years ago
- SMTP Netcat , test SMTP protocol☆105Updated 2 years ago
- fastjson 1.2.68 版本 autotype bypass☆140Updated 2 years ago
- XxlJob<=2.1.2配置不当情况下反序列化RCE☆72Updated 4 years ago
- e-mesaage <=4.15 后台jar包上传exp☆47Updated 5 years ago
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆90Updated 2 years ago
- 一个Spring4Shell 被动式检测的Burp插件☆93Updated 2 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 4 years ago
- 2020年~2021年 网站CMS、中间件、框架系统漏洞集合☆36Updated 3 years ago
- exchange-ssrf-rce☆77Updated 3 years ago
- woodpecker-framework框架http发包库,专门为漏洞检测与利用场景设计。☆67Updated last year
- mvn clean package -DskipTests☆45Updated last year