xiaopan233 / Java_agent_without_file
Java agent without file 无文件的Java agent
☆76Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for Java_agent_without_file
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具,可根据不同的Jdk生成出其所对应的xslt文件☆87Updated last year
- [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload☆90Updated 2 years ago
- ☆41Updated 3 years ago
- Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …☆50Updated 2 years ago
- ☆51Updated 2 years ago
- Writeup and environment for XCTF2021Final-Dubbo☆45Updated 3 years ago
- 打CTF实在厌倦了找利用链,就知道一个fastjson的版本,一堆依赖找啊找,头都疼。为了解决这个烦恼,用了卓卓师傅的fastjson黑名单工具和库,自己改造了一下。☆32Updated 4 years ago
- 一些结合第三方组件的Fastjson POC,在1.2.48以后版本中陆续被添加至黑名单。☆56Updated 5 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆162Updated 2 years ago
- CVE-2021-43297 POC,Apache Dubbo<= 2.7.13时可以实现RCE☆38Updated 2 years ago
- jre8u20 gadget☆33Updated 3 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆114Updated 2 years ago
- 编译原理学习代码仓库☆23Updated 2 years ago
- Apache Dubbo Hessian2 CVE-2021-43297 demo☆46Updated 2 years ago
- 使用java agent反序列化注入内存shell☆67Updated 4 years ago
- java☆54Updated last year
- ThinkPHP各版本反序列化利用代码☆32Updated 4 years ago
- nativeRasp that can hook native methods☆24Updated last year
- SMTP Netcat , test SMTP protocol☆105Updated 2 years ago
- ☆135Updated last year
- ☆41Updated 5 years ago
- A tool specifically designed for Kubernetes environments aims to efficiently and automatically discover hidden vulnerable APIs within clu…☆67Updated this week
- Use java instrument API without JAR file☆44Updated 2 years ago
- 清除基于java agent木马☆78Updated 3 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆126Updated 4 years ago