Alternatives and similar repositories for redis-ssrf:

Users that are interested in redis-ssrf are comparing it to the libraries listed below

• lalajun / RMIDeserialize
  RMI 反序列化环境 一步步
  ☆210Updated 4 years ago
• waderwu / attackRmi
  attackRmi
  ☆252Updated 4 years ago
• LS95 / gopher-redis-auth
  This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。
  ☆114Updated 5 years ago
• iceyhexman / flask_memory_shell
  Flask 内存马
  ☆311Updated 4 years ago
• potats0 / javaSerializationTools
  ☆142Updated 4 years ago
• Y4er / fastjson-bypass-autotype-1.2.68
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆226Updated 2 years ago
• Litch1-v / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆181Updated 3 years ago
• ccdr4gon / Dr4gonSword
  ☆96Updated last year
• rufherg / WebLogic_Basic_Poc
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆93Updated 4 years ago
• kingkaki / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆102Updated 5 years ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆230Updated 4 years ago
• Ch1ngg / WebLogicPasswordDecryptorUi
  解密weblogic AES或DES加密方法
  ☆229Updated 4 years ago
• iSafeBlue / redis-rce
  Redis RCE 的几种方法
  ☆90Updated 9 months ago
• EddieIvan01 / secure-cookie-faker
  Security tool to encode/decode Golang web-frameworks' client-side session cookie which use `gorilla/securecookie` or `gorilla/sessions`, …
  ☆36Updated 5 years ago
• inspiringz / Shiro-721
  Shiro-721 RCE Via RememberMe Padding Oracle Attack
  ☆257Updated 4 years ago
• Mochazz / Struts2-Vuln
  关于Struts2框架的历史漏洞个人分析文章
  ☆53Updated 4 years ago
• iSafeBlue / fastjson-autotype-bypass-demo
  fastjson 1.2.68 版本 autotype bypass
  ☆140Updated 2 years ago
• AntSwordProject / AntSword-Labs
  Awesome environment for antsword tests
  ☆178Updated 3 years ago
• 1c3z / fileleak
  又一款敏感文件泄漏检测工具
  ☆104Updated 5 years ago
• threedr3am / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。
  ☆215Updated 3 years ago
• threedr3am / tomcat-cluster-session-sync-exp
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆213Updated 4 years ago
• wuppp / shiro_rce_exp
  Shiro RCE (Padding Oracle Attack)
  ☆142Updated 5 years ago
• admintony / shiro_rememberMe_Rce
  利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。
  ☆122Updated 4 years ago
• vulhub / Apereo-CAS-Attack
  WIP: Demo for Attacking Apereo CAS
  ☆89Updated 4 years ago
• Medicean / as_bypass_php_disable_functions
  antsword bypass PHP disable_functions
  ☆196Updated 2 years ago
• 0671 / RedisModules-ExecuteCommand-for-Windows
  可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。
  ☆257Updated 2 years ago
• flowerwind / JspFinder
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆175Updated 3 years ago
• FoolMitAh / mysql_gopher_attack
  ☆39Updated 6 years ago
• yzddmr6 / JspForAntSword
  中国蚁剑JSP一句话Payload
  ☆120Updated 4 years ago
• 5up3rc / weblogic_cmd
  weblogic t3 deserialization rce
  ☆268Updated 7 years ago