welk1n/FastjsonPocs external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

welk1n/FastjsonPocs

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/welk1n/FastjsonPocs)

Close

welk1n / FastjsonPocsView on GitHubMore

• External links
• Readme badge

一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。

☆56Oct 29, 2019Updated 6 years ago

Alternatives and similar repositories for FastjsonPocs

Users that are interested in FastjsonPocs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• SummerSec / LookupInterface

  View on GitHub
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆166Apr 10, 2022Updated 4 years ago
• r00t4dm / aLIEz

  View on GitHub
  ☆196Sep 26, 2024Updated last year
• haby0 / sec-note

  View on GitHub
  记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。
  ☆118Dec 30, 2021Updated 4 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆141Updated this week
• hosch3n / FastjsonVulns

  View on GitHub
  ☆92Jul 22, 2026Updated 3 weeks ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• z1Ro0 / tomcat_nofile_webshell

  View on GitHub
  Tomcat基于动态注册Filter的无文件Webshell
  ☆26Jun 20, 2020Updated 6 years ago
• jas502n / Security_Article

  View on GitHub
  scrapy website Article and link ...
  ☆15Dec 13, 2020Updated 5 years ago
• p1n93r / SpringBootAdmin-thymeleaf-SSTI

  View on GitHub
  SpringBootAdmin-thymeleaf-SSTI which can cause RCE
  ☆88Jul 18, 2023Updated 3 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆272Mar 4, 2022Updated 4 years ago
• depycode / fastjson-c3p0

  View on GitHub
  fastjson不出网利用、c3p0
  ☆257Jul 30, 2021Updated 5 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆531Aug 25, 2020Updated 5 years ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆450Sep 10, 2021Updated 4 years ago
• feihong-cs / jre8u20_gadget

  View on GitHub
  jre8u20 gadget
  ☆34May 23, 2021Updated 5 years ago
• kezibei / fastjson_payload

  View on GitHub
  ☆250Apr 15, 2026Updated 3 months ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆442Mar 23, 2026Updated 4 months ago
• jweny / shiro-cve-2020-17523

  View on GitHub
  shiro-cve-2020-17523 漏洞的两种绕过姿势分析 以及配套的漏洞环境
  ☆118Feb 7, 2021Updated 5 years ago
• Hzllaga / JsLoader

  View on GitHub
  js免杀shellcode，绕过杀毒添加自启
  ☆350Mar 16, 2021Updated 5 years ago
• QAX-A-Team / WeblogicEnvironment

  View on GitHub
  Weblogic环境搭建工具
  ☆799Apr 23, 2020Updated 6 years ago
• mishmashclone / GrrrDog-Java-Deserialization-Cheat-Sheet

  View on GitHub
  https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
  ☆54Sep 11, 2021Updated 4 years ago
• Sakurasan / scf-proxy

  View on GitHub
  云函数代理服务
  ☆419Jun 6, 2025Updated last year
• Drac0nids / SeeyonExploit

  View on GitHub
  基于go语言的致远OA漏洞检测工具
  ☆38Oct 28, 2022Updated 3 years ago
• Wrin9 / weaverOA_sql_RCE

  View on GitHub
  泛微OA_V9全版本的SQL远程代码执行漏洞
  ☆157Apr 20, 2022Updated 4 years ago
• jas502n / Shiro_Xray

  View on GitHub
  CommonsBeanutils1,CommonsCollectionsK1
  ☆58Nov 16, 2020Updated 5 years ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• pmiaowu / log4j2Scan

  View on GitHub
  用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件
  ☆210Apr 18, 2023Updated 3 years ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆448Jun 19, 2024Updated 2 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆760Apr 14, 2021Updated 5 years ago
• su18 / hack-fastjson-1.2.80

  View on GitHub
  ☆525Sep 16, 2022Updated 3 years ago
• Airboi / Citrix-ADC-RCE-CVE-2020-8193

  View on GitHub
  Citrix ADC从权限绕过到RCE
  ☆45Jul 12, 2020Updated 6 years ago
• depycode / fastjson-local-echo

  View on GitHub
  基于dbcp的fastjson rce 回显
  ☆198Jun 28, 2021Updated 5 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,008Oct 15, 2020Updated 5 years ago
• LandGrey / ClassHound

  View on GitHub
  利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码
  ☆710May 10, 2021Updated 5 years ago
• west9b / CVE-2022-30525

  View on GitHub
  CVE-2022-30525 Zyxel 防火墙命令注入漏洞 POC&EXPC
  ☆12May 28, 2022Updated 4 years ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• f0ng / JavaFileDict

  View on GitHub
  Java应用的一些配置文件字典，来源于公开的字典与平时收集
  ☆320Feb 1, 2024Updated 2 years ago
• timwhitez / Ortau

  View on GitHub
  一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。
  ☆13Feb 14, 2022Updated 4 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆845Jun 7, 2022Updated 4 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆256Jul 12, 2023Updated 3 years ago
• potats0 / javaSerializationTools

  View on GitHub
  ☆145Jan 21, 2021Updated 5 years ago
• rebeyond / JNDInjector

  View on GitHub
  一个高度可定制化的JNDI和Java反序列化利用工具
  ☆476Jan 17, 2023Updated 3 years ago
• Y4er / javaagent-tomcat-memshell

  View on GitHub
  使用java agent反序列化注入内存shell
  ☆69Sep 30, 2020Updated 5 years ago