welk1n / JNDI-Injection-Exploit

Related projects ⓘ

Alternatives and complementary repositories for JNDI-Injection-Exploit

• mbechler / marshalsec
  ☆3,392Updated last year
• whwlsfb / Log4j2Scan
  Log4j2 RCE Passive Scanner plugin for BurpSuite
  ☆771Updated last year
• JoyChou93 / java-sec-code
  Java web common vulnerabilities and security code which is base on springboot and spring security
  ☆2,415Updated last week
• zhzyker / exphub
  Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…
  ☆4,119Updated 3 years ago
• threedr3am / learnjavabug
  Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…
  ☆2,600Updated 7 months ago
• 0xn0ne / weblogicScanner
  weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…
  ☆2,008Updated 11 months ago
• rtcatc / Packer-Fuzzer
  Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…
  ☆2,864Updated 5 months ago
• zhzyker / vulmap
  Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
  ☆3,394Updated last year
• L-codes / Neo-reGeorg
  Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
  ☆2,892Updated last month
• gobysec / Goby
  Attack surface mapping
  ☆1,409Updated 8 months ago
• Ascotbe / Kernelhub
  Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability detai…
  ☆2,928Updated last year
• evilc0deooo / PentesterSpecialDict
  构建并优化高效的渗透测试字典集合，以提升网络安全从业人员的测试效率和效果。
  ☆1,575Updated 3 months ago
• knownsec / pocsuite3
  pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
  ☆3,644Updated 6 months ago
• BeichenDream / Godzilla
  哥斯拉
  ☆3,925Updated 3 months ago
• 1n7erface / PocList
  Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-…
  ☆1,077Updated last year
• bit4woo / knife
  A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
  ☆1,616Updated 2 months ago
• FunnyWolf / Viper
  Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台
  ☆3,730Updated last month
• wh1t3p1g / ysomap
  A helpful Java Deserialization exploit framework.
  ☆1,176Updated 4 months ago
• LandGrey / SpringBootVulExploit
  SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
  ☆5,783Updated 3 years ago
• TheKingOfDuck / burpFakeIP
  服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件
  ☆1,436Updated 2 years ago
• HackJava / HackJava
  《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
  ☆2,595Updated last year
• gloxec / CrossC2
  generate CobaltStrike's cross-platform payload
  ☆2,276Updated 11 months ago
• wyzxxz / jndi_tool
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆1,916Updated 5 months ago
• gh0stkey / Web-Fuzzing-Box
  Web Fuzzing Box - Web 模糊测试字典与一些Payloads
  ☆2,156Updated 4 months ago
• Threezh1 / JSFinder
  JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
  ☆2,632Updated 2 years ago
• pmiaowu / BurpShiroPassiveScan
  一款基于BurpSuite的被动式shiro检测插件
  ☆1,687Updated last year