Java反序列化漏洞学习
☆14Jul 1, 2021Updated 4 years ago
Alternatives and similar repositories for JavaSerializeDemo
Users that are interested in JavaSerializeDemo are comparing it to the libraries listed below
Sorting:
- java反序列化漏洞笔记☆23Apr 6, 2019Updated 6 years ago
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- 一个调用 rustscan 进行端口扫描的 go 库☆22Dec 30, 2021Updated 4 years ago
- Java RMI反序列化漏洞插件☆49Jun 11, 2021Updated 4 years ago
- 将fofa quake zoomeye hunter等空间测绘聚合的小工具☆23Aug 13, 2023Updated 2 years ago
- study_summary☆10Aug 8, 2022Updated 3 years ago
- 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新☆13Apr 18, 2022Updated 3 years ago
- 适用于目标命令执行不出网、无回显等场景☆13Oct 8, 2022Updated 3 years ago
- 在学习Java反序列化漏洞的过程中,用来理解Java RMI程序的执行流程,演示如何攻击Java RMI程序的几个示例。☆11May 6, 2020Updated 5 years ago
- 针对kubernetes中的RBAC可能被攻击检测工具。Detection tool for possible attacks on RBAC in kubernetes.☆26Jan 4, 2024Updated 2 years ago
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated last month
- Many yaml scanner plugin parser [nuclei-template, xray-poc, ez-poc] - for Python☆13Mar 27, 2022Updated 3 years ago
- 模拟cobalt strike beacon上线包. Simulation cobalt strike beacon connection packet.☆17Sep 9, 2021Updated 4 years ago
- Fastjson反序列化环境(一步步)☆14Jun 17, 2022Updated 3 years ago
- 内存马持久化☆59May 19, 2022Updated 3 years ago
- 就是一个练习Java反序列化的最简单环境☆14Dec 24, 2021Updated 4 years ago
- 远程shellcode加载&权限维持+小功能☆301May 7, 2024Updated last year
- golang写的批量对目标网站进行截图的小工具,适合目标资产比较多时,快速定位薄弱点。☆33Oct 14, 2022Updated 3 years ago
- vulhub-cli 快速下载&启动vulhub环境☆14Jun 17, 2021Updated 4 years ago
- 利用云函数实现端口扫描☆15Nov 17, 2025Updated 3 months ago
- 针对于Spring框架的自动Java代码审计工具☆37Jan 24, 2022Updated 4 years ago
- ☆69Feb 26, 2021Updated 5 years ago
- 渗透测试自动化报告平台☆16Nov 22, 2022Updated 3 years ago
- MemShell List☆90Jul 18, 2023Updated 2 years ago
- ☆24Jun 12, 2023Updated 2 years ago
- Java反序列化漏洞学习笔记☆16Nov 17, 2019Updated 6 years ago
- SpringFramework 远程代码执行漏洞CVE-2022-22965☆73Apr 1, 2022Updated 3 years ago
- 7bits安全团队-《Java安全-记一次实战使用memoryshell》代码样例☆19Nov 13, 2022Updated 3 years ago
- MultiThreading Finger Identify☆17May 2, 2024Updated last year
- jsp版sqlilab 1-21关☆20Jun 21, 2022Updated 3 years ago
- 结合反射调用、动态编译、BCEL、defineClass0,ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具☆19Dec 16, 2021Updated 4 years ago
- FROM:@Mr-xn 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss pene…☆22Jan 12, 2022Updated 4 years ago
- 适用AWD-WEB的各种场景下的攻击框架。☆22May 26, 2023Updated 2 years ago
- ☆47Mar 10, 2022Updated 3 years ago
- 伪造webshell钓鱼反制蚁剑☆52Oct 16, 2021Updated 4 years ago
- 一个用于隐藏C2的、开箱即用的反向代理服务器。 旨在省去繁琐的配置Nginx服务的过程。☆45Dec 18, 2021Updated 4 years ago
- 预备增加关于Spring的相关漏洞环境。依赖https://github.com/LandGrey/SpringBootVulExploit☆19Mar 1, 2021Updated 4 years ago
- 代码审计总结☆85Sep 1, 2021Updated 4 years ago
- fastjson 80 远程代码执行漏洞复现☆199Sep 7, 2022Updated 3 years ago