本工具的定位是快速生成Java安全相关的Payload，如内存马、反序列化链、JNDI url、Fastjson等，动态生成相关Payload，并附带相应的文档。
☆94Feb 25, 2025Updated last year
Alternatives and similar repositories for GenerateNoHard
Users that are interested in GenerateNoHard are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My script to Prepare for the OSCP exam.I write some useful script by own or refere others and modify☆17Oct 24, 2021Updated 4 years ago
- Java agent without file 无文件的Java agent☆81Apr 7, 2022Updated 4 years ago
- 之前的个人wiki。现在用 Blog 的形式来写了。这个wiki就放在这里吧。希望里面的内容能帮助到别人。☆10Apr 2, 2020Updated 6 years ago
- 子域名收集和整理脚本、配合Oneforall食用更佳☆11May 10, 2020Updated 6 years ago
- Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc☆10Mar 25, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- Some traffic encryption webshell and encoder for AntSword. 蚁剑流量加密马及编码器☆75Dec 5, 2020Updated 5 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆55Sep 6, 2022Updated 3 years ago
- Java web路由内存分析工具☆437May 22, 2025Updated last year
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 4 years ago
- 内存马持久化☆59May 19, 2022Updated 4 years ago
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆272Mar 4, 2022Updated 4 years ago
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆132Oct 12, 2024Updated last year
- ☆314Feb 27, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆240Nov 25, 2022Updated 3 years ago
- ☆22Oct 7, 2022Updated 3 years ago
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- 用Java agent实现内存马等功能☆201Jul 27, 2023Updated 2 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆605Jun 16, 2026Updated last month
- Spring Actuator端点的BurpSuite被动扫描插件。☆202Nov 2, 2022Updated 3 years ago
- 域内自动化信息搜集利用工具☆471Oct 24, 2023Updated 2 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆256Jul 12, 2023Updated 3 years ago
- OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。☆676Dec 30, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 连接eval一句话webshell，获得可交互的虚拟终端☆94Sep 7, 2022Updated 3 years ago
- 通过正则搜索、批量反编译特定Jar包中的class名称☆322Dec 9, 2021Updated 4 years ago
- 自己积累的一些Java反序列化利用链☆95Feb 27, 2023Updated 3 years ago
- java反序列化学习笔记☆16Nov 17, 2021Updated 4 years ago
- 这是 一个用Go编写的红队内网环境中一个能快速开启HTTP文件浏览服务的小工具，能够执行shell命令,可以执行webshell☆77May 7, 2023Updated 3 years ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆549Mar 6, 2025Updated last year
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,056Oct 7, 2022Updated 3 years ago
- JavaPassDump☆277Jan 7, 2022Updated 4 years ago
- Java命令行文件监控小工具(代码审计)☆105Nov 29, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 建议使用新版：https://github.com/jar-analyzer/jar-analyzer☆896Nov 30, 2023Updated 2 years ago
- Java表达式语句生成器☆192Oct 9, 2023Updated 2 years ago
- 一个垃圾利用工具，半自动发包机器☆227Sep 8, 2022Updated 3 years ago
- 🚀 一款为了学习go而诞生的漏洞利用工具☆450Jun 14, 2022Updated 4 years ago
- Java RCE 回显测试代码☆1,011Oct 15, 2020Updated 5 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆760Apr 14, 2021Updated 5 years ago
- kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略☆292Jul 10, 2024Updated 2 years ago