-
dirmap Public
An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
-
-
redis_exploit Public
Forked from raminfp/redis_exploitCVE-2025-49844 (RediShell)
-
-
-
BehinderClientSource Public
Forked from MountCloud/BehinderClientSource❄️冰蝎客户端源码-V4.0.6🔞
Java UpdatedFeb 28, 2023 -
-
-
EmailAll Public
Forked from Taonn/EmailAllEmailAll is a powerful Email Collect tool — 一款强大的邮箱收集工具
-
JNDIMonitor Public
Forked from r00tSe7en/JNDIMonitor一个LDAP请求监听器,摆脱dnslog平台
-
-
DNSLog-Platform-Golang Public
Forked from yumusb/DNSLog-Platform-GolangDNSLOG平台 golang 一键启动版
-
JNDIExploit-1 Public
Forked from Mr-xn/JNDIExploit-1一款用于 JNDI注入 利用的工具,大量参考/引用了 Rogue JNDI 项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。(from https://github.com/feihong-cs/JNDIExploit)
-
CVE-2021-44228-Apache-Log4j-Rce Public
Forked from y35uishere/apache-log4j-pocApache Log4j 远程代码执行
-
BurpFastJsonScan Public
Forked from pmiaowu/BurpFastJsonScan一款基于BurpSuite的被动式FastJson检测插件
-
Log4j2-CVE-2021-44228 Public
Forked from jas502n/Log4j2-CVE-2021-44228Remote Code Injection In Log4j
UpdatedDec 13, 2021 -
cloudrasp-log4j2 Public
Forked from boundaryx/cloudrasp-log4j2一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense.
Java UpdatedDec 10, 2021 -
JNDIExploit-2 Public
Forked from Jeromeyoung/JNDIExploit-1一款用于JNDI注入利用的工具,大量参考/引用了Rogue JNDI项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。
-
-
DNSlog-GO Public
Forked from lanyi1998/DNSlog-GODNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具,自带WEB界面
HTML MIT License UpdatedMar 12, 2021 -
CVE-2021-1732-Exploit Public
Forked from KaLendsi/CVE-2021-1732-ExploitCVE-2021-1732 Exploit
C++ UpdatedMar 5, 2021 -
JNDI-Injection-Bypass Public
Forked from welk1n/JNDI-Injection-BypassSome payloads of JNDI Injection in JDK 1.8.0_191+
Java UpdatedDec 9, 2020 -
-
-
CVE-2020-9484 Public
Forked from seanachao/CVE-2020-9484利用ceye批量检测CVE-2020-9484
-
BadPotato Public
Forked from BeichenDream/BadPotatoWindows 权限提升 BadPotato
-
ShiroScan Public
Forked from sv3nbeast/ShiroScanShiro<=1.2.4反序列化,一键检测工具
-
-
-
learnjavabug Public
Forked from threedr3am/learnjavabugJava安全相关的漏洞和技术demo,其中包括原生Java、Fastjson、Jackson、Hessian2以及XML反序列化漏洞利用和Dubbo(Hessian2反序列化)、Shiro(PaddingOracleCBC)等框架的exploits,并且还有Java Security Manager绕过、Dubbo-Hessian2安全加固、RMI利用等等实践代码。


