Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on May 10, 2020

• feat:add apache-poi

  

  “threedr3am”

  committed
  95ff048

  Copy full SHA for 95ff048

• add:fastjson gadget bypass 1.2.68 autoType - leak

  

  “threedr3am”

  committed
  08602ce

  Copy full SHA for 08602ce

Commits on May 6, 2020

• Merge branch 'feat/data-feature'

  Show description for 91f5208
  

  “threedr3am”

  committed
  91f5208

  Copy full SHA for 91f5208

• 一些java攻击特征的匹配

  

  “threedr3am”

  committed
  5468097

  Copy full SHA for 5468097

• add:Catalina Calc exec

  

  “threedr3am”

  committed
  143b5e5

  Copy full SHA for 143b5e5

• op:actuator add spring-boot maven plugin

  

  “threedr3am”

  committed
  cd2fa15

  Copy full SHA for cd2fa15

Commits on Apr 14, 2020

• feat:add WebShell

  

  “threedr3am”

  committed
  dc8a8dc

  Copy full SHA for dc8a8dc

Commits on Apr 7, 2020

• op:nexus CVE-2020-10199

  

  “threedr3am”

  committed
  93d57c4

  Copy full SHA for 93d57c4

• Merge branch 'nexus'

  

  “threedr3am”

  committed
  c296857

  Copy full SHA for c296857

• feat:fastjson一种利用$ref几乎任意getter触发的方法

  

  “threedr3am”

  committed
  ea61297

  Copy full SHA for ea61297

• feat:添加jackson-gadget

  

  “threedr3am”

  committed
  f201def

  Copy full SHA for f201def

Commits on Apr 4, 2020

• feat:nexus CVE-2020-10199

  

  “threedr3am”

  committed
  e93a761

  Copy full SHA for e93a761

Commits on Apr 3, 2020

• fix:nexus-CVE-2020-11444

  

  “threedr3am”

  committed
  cd725d1

  Copy full SHA for cd725d1

• feat:添加nexus

  

  “threedr3am”

  committed
  964a009

  Copy full SHA for 964a009

Commits on Mar 27, 2020

• feat:apache shiro CVE-2020-1957的实际生产环境bypass例子

  

  “threedr3am”

  committed
  94979ad

  Copy full SHA for 94979ad

• fix:shiro错误实例

  

  “threedr3am”

  committed
  b90bf78

  Copy full SHA for b90bf78

• Merge branch 'shiro'

  

  “threedr3am”

  committed
  efdff37

  Copy full SHA for efdff37

• feat:添加apache shiro CVE-2020-1957 authentication bypass.

  

  “threedr3am”

  committed
  d0c615e

  Copy full SHA for d0c615e

Commits on Mar 26, 2020

• Merge branch 'shiro'

  

  “threedr3am”

  committed
  d1f49af

  Copy full SHA for d1f49af

• feat:添加shiro 1.4.1版本及以前的认证bypass环境和以及复现

  

  “threedr3am”

  committed
  cb6d7a3

  Copy full SHA for cb6d7a3

Commits on Mar 25, 2020

• feat:添加fastjson dos payload

  

  “threedr3am”

  committed
  ca02064

  Copy full SHA for ca02064

• feat:添加一点点fastjson gadget

  

  “threedr3am”

  committed
  1a71533

  Copy full SHA for 1a71533

Commits on Mar 19, 2020

• feat:添加shiro的jackson gadget

  

  “threedr3am”

  committed
  b56f8f7

  Copy full SHA for b56f8f7

Commits on Mar 16, 2020

• fix:两个鸡肋中的鸡肋gadget

  

  “threedr3am”

  committed
  b9a9ddf

  Copy full SHA for b9a9ddf

• feat:新增jackson和fastjson通用鸡肋caucho-quercus RCE gadget

  

  “threedr3am”

  committed
  aadbd9d

  Copy full SHA for aadbd9d

• feat:发现同一个jar包下还有另一个gadget-org.apache.aries.transaction.jms.RecoverablePooledConnectionFactory，捡漏时间到了

  

  “threedr3am”

  committed
  85a30e7

  Copy full SHA for 85a30e7

• feat:一个复现不出来，却被官方添加黑名单的jackson gadget（org.quartz.utils.JNDIConnectionProvider）

  

  “threedr3am”

  committed
  537241c

  Copy full SHA for 537241c

• feat:添加ignite-jta jackson gadget新利用点

  

  “threedr3am”

  committed
  e978d19

  Copy full SHA for e978d19

• Merge remote-tracking branch 'origin/master'

  

  “threedr3am”

  committed
  ecaf795

  Copy full SHA for ecaf795

• feat:添加ignite-jta和aries.transaction.jms新jackson gadget

  

  “threedr3am”

  committed
  4513c88

  Copy full SHA for 4513c88

Commits on Mar 15, 2020

• feat:添加基于tomcat的webshell和回显类

  

  “threedr3am”

  committed
  b1455e3

  Copy full SHA for b1455e3

Commits on Mar 14, 2020

• Create LICENSE

  

  threedr3am

  authored
  9d8f6e1

  Copy full SHA for 9d8f6e1

Commits on Mar 11, 2020

• feat:CVE-2020-1947

  

  “threedr3am”

  committed
  eadf7bb

  Copy full SHA for eadf7bb

Commits on Mar 10, 2020

• feat:添加jackson shiro-core gadget

  

  “threedr3am”

  committed
  6d89b02

  Copy full SHA for 6d89b02

• feat:添加Fastjson Apache shiro-core RCE gadget

  

  “threedr3am”

  committed
  1bc037f

  Copy full SHA for 1bc037f

Pagination

Previous

Next