Alternatives and similar repositories for redis-ssrf:

Users that are interested in redis-ssrf are comparing it to the libraries listed below

• lalajun / RMIDeserialize
  RMI 反序列化环境 一步步
  ☆210Updated 4 years ago
• waderwu / attackRmi
  attackRmi
  ☆254Updated 4 years ago
• Y4er / fastjson-bypass-autotype-1.2.68
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆226Updated 2 years ago
• potats0 / javaSerializationTools
  ☆142Updated 4 years ago
• iceyhexman / flask_memory_shell
  Flask 内存马
  ☆310Updated 4 years ago
• Ch1ngg / WebLogicPasswordDecryptorUi
  解密weblogic AES或DES加密方法
  ☆229Updated 4 years ago
• Litch1-v / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆182Updated 4 years ago
• LS95 / gopher-redis-auth
  This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。
  ☆114Updated 5 years ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆231Updated 4 years ago
• iSafeBlue / redis-rce
  Redis RCE 的几种方法
  ☆90Updated 11 months ago
• 5up3rc / weblogic_cmd
  weblogic t3 deserialization rce
  ☆271Updated 7 years ago
• 0671 / RedisModules-ExecuteCommand-for-Windows
  可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。
  ☆257Updated 2 years ago
• CHYbeta / OddProxyDemo
  ☆213Updated last year
• inspiringz / Shiro-721
  Shiro-721 RCE Via RememberMe Padding Oracle Attack
  ☆260Updated 4 years ago
• kingkaki / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆102Updated 5 years ago
• rufherg / WebLogic_Basic_Poc
  用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库
  ☆93Updated 4 years ago
• ccdr4gon / Dr4gonSword
  ☆96Updated last year
• Artemis1029 / Java_xmlhack
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆166Updated 6 years ago
• TheKingOfDuck / paramFuzzer
  一款高效的参数fuzz工具|A faster param fuzzing test tool
  ☆100Updated 4 years ago
• admintony / shiro_rememberMe_Rce
  利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。
  ☆122Updated 4 years ago
• vulhub / Apereo-CAS-Attack
  WIP: Demo for Attacking Apereo CAS
  ☆91Updated 4 years ago
• threedr3am / tomcat-cluster-session-sync-exp
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆213Updated 4 years ago
• EddieIvan01 / secure-cookie-faker
  Security tool to encode/decode Golang web-frameworks' client-side session cookie which use `gorilla/securecookie` or `gorilla/sessions`, …
  ☆36Updated 5 years ago
• NyDubh3 / Pentesting-Active-Directory-CN
  域渗透脑图中文翻译版
  ☆277Updated 3 years ago
• depycode / fastjson-c3p0
  fastjson不出网利用、c3p0
  ☆252Updated 3 years ago
• A-D-Team / attackRmi
  ☆219Updated 3 years ago
• p1g3 / Fastjson-Scanner
  a burp extension to find where use fastjson
  ☆164Updated 5 years ago
• jas502n / SpringBoot_Actuator_RCE
  SpringBoot_Actuator_RCE
  ☆96Updated 4 years ago
• Mochazz / Struts2-Vuln
  关于Struts2框架的历史漏洞个人分析文章
  ☆54Updated 4 years ago
• arno567 / ShiroScanF
  shiro反序列化批量ip快速检测脚本
  ☆78Updated 4 years ago