zema1 / ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
☆351Updated 2 years ago
Alternatives and similar repositories for ysoserial:
Users that are interested in ysoserial are comparing it to the libraries listed below
- 利用链、漏洞检测工具☆367Updated 5 months ago
- 内存马Demo合集 memshell demo for java / php / python☆406Updated 3 years ago
- Struts2漏洞实例源码☆205Updated 4 years ago
- fastjson漏洞burp插件,检测fastjson<1.2.68基于dnslog,fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。☆114Updated 3 years ago
- ☆320Updated 3 years ago
- SQL 注入利用工具,存在waf的情况下自定义编写tamper脚本 dump数据☆283Updated 4 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。☆215Updated 3 years ago
- 给woodpecker框架量身定制的ysoserial☆544Updated 2 years ago
- 一个高度可定制化的JNDI和Java反序列化利用工具☆459Updated 2 years ago
- 🧬 辅助生成 XRay YAML POC☆263Updated 2 years ago
- ☆235Updated 5 years ago
- 笔记☆9Updated this week
- FilterBased/ServletBased in memory shell for Tomcat and some other middlewares☆359Updated 4 years ago
- ☆497Updated 2 years ago
- 通过 Redis 主从写出无损文件☆702Updated 4 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆180Updated 3 years ago
- JDBC Connection URL Attack☆397Updated 3 years ago
- fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.☆223Updated 2 years ago
- Shiro-721 RCE Via RememberMe Padding Oracle Attack☆255Updated 4 years ago
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞,一键注册蚁剑filter内存shell☆531Updated 4 years ago
- 在线漏洞平台☆189Updated 4 years ago
- Fastjson <= 1.2.47 远程命令执行漏洞利用工具及方法☆401Updated 4 years ago
- 规范渗透测试报告中的漏洞名称以及修复建议☆144Updated 5 years ago