Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Mar 27, 2020

• feat:apache shiro CVE-2020-1957的实际生产环境bypass例子

  

  “threedr3am”

  committed
  94979ad

  Copy full SHA for 94979ad

• fix:shiro错误实例

  

  “threedr3am”

  committed
  b90bf78

  Copy full SHA for b90bf78

• Merge branch 'shiro'

  

  “threedr3am”

  committed
  efdff37

  Copy full SHA for efdff37

• feat:添加apache shiro CVE-2020-1957 authentication bypass.

  

  “threedr3am”

  committed
  d0c615e

  Copy full SHA for d0c615e

Commits on Mar 26, 2020

• Merge branch 'shiro'

  

  “threedr3am”

  committed
  d1f49af

  Copy full SHA for d1f49af

• feat:添加shiro 1.4.1版本及以前的认证bypass环境和以及复现

  

  “threedr3am”

  committed
  cb6d7a3

  Copy full SHA for cb6d7a3

Commits on Mar 25, 2020

• feat:添加fastjson dos payload

  

  “threedr3am”

  committed
  ca02064

  Copy full SHA for ca02064

• feat:添加一点点fastjson gadget

  

  “threedr3am”

  committed
  1a71533

  Copy full SHA for 1a71533

Commits on Mar 19, 2020

• feat:添加shiro的jackson gadget

  

  “threedr3am”

  committed
  b56f8f7

  Copy full SHA for b56f8f7

Commits on Mar 16, 2020

• fix:两个鸡肋中的鸡肋gadget

  

  “threedr3am”

  committed
  b9a9ddf

  Copy full SHA for b9a9ddf

• feat:新增jackson和fastjson通用鸡肋caucho-quercus RCE gadget

  

  “threedr3am”

  committed
  aadbd9d

  Copy full SHA for aadbd9d

• feat:发现同一个jar包下还有另一个gadget-org.apache.aries.transaction.jms.RecoverablePooledConnectionFactory，捡漏时间到了

  

  “threedr3am”

  committed
  85a30e7

  Copy full SHA for 85a30e7

• feat:一个复现不出来，却被官方添加黑名单的jackson gadget（org.quartz.utils.JNDIConnectionProvider）

  

  “threedr3am”

  committed
  537241c

  Copy full SHA for 537241c

• feat:添加ignite-jta jackson gadget新利用点

  

  “threedr3am”

  committed
  e978d19

  Copy full SHA for e978d19

• Merge remote-tracking branch 'origin/master'

  

  “threedr3am”

  committed
  ecaf795

  Copy full SHA for ecaf795

• feat:添加ignite-jta和aries.transaction.jms新jackson gadget

  

  “threedr3am”

  committed
  4513c88

  Copy full SHA for 4513c88

Commits on Mar 15, 2020

• feat:添加基于tomcat的webshell和回显类

  

  “threedr3am”

  committed
  b1455e3

  Copy full SHA for b1455e3

Commits on Mar 14, 2020

• Create LICENSE

  

  threedr3am

  authored
  9d8f6e1

  Copy full SHA for 9d8f6e1

Commits on Mar 11, 2020

• feat:CVE-2020-1947

  

  “threedr3am”

  committed
  eadf7bb

  Copy full SHA for eadf7bb

Commits on Mar 10, 2020

• feat:添加jackson shiro-core gadget

  

  “threedr3am”

  committed
  6d89b02

  Copy full SHA for 6d89b02

• feat:添加Fastjson Apache shiro-core RCE gadget

  

  “threedr3am”

  committed
  1bc037f

  Copy full SHA for 1bc037f

• CVE-2020-5405另一个利用点的添加

  

  “threedr3am”

  committed
  6be4383

  Copy full SHA for 6be4383

Commits on Mar 8, 2020

• modify README.md

  

  “threedr3am”

  committed
  13fe8e8

  Copy full SHA for 13fe8e8

• op

  

  “threedr3am”

  committed
  67d24d4

  Copy full SHA for 67d24d4

• fix

  

  “threedr3am”

  committed
  bf2201b

  Copy full SHA for bf2201b

• feat:spring cloud config server(CVE-2020-5405)

  

  “threedr3am”

  committed
  bee461e

  Copy full SHA for bee461e

• fix

  

  “threedr3am”

  committed
  54ee515

  Copy full SHA for 54ee515

• op application.yml

  

  “threedr3am”

  committed
  d642de2

  Copy full SHA for d642de2

Commits on Mar 7, 2020

• feat:添加spring cloud config server漏洞模块(CVE-201903799)

  

  “threedr3am”

  committed
  9203dcf

  Copy full SHA for 9203dcf

Commits on Mar 5, 2020

• fix:actuator md描述错误问题

  

  “threedr3am”

  committed
  9535cb2

  Copy full SHA for 9535cb2

Commits on Mar 3, 2020

• feat:公开若干个新的jackson、fastjson SSRF gadget（水）

  

  “threedr3am”

  committed
  23ab9ee

  Copy full SHA for 23ab9ee

• Merge branch 'feat/jackson-gadget-ssrf-jre-jeditorpane'

  

  “threedr3am”

  committed
  35a3f38

  Copy full SHA for 35a3f38

• Merge branch 'feat/fastjson-gadget-ssrf-jre-jeditorpane'

  

  “threedr3am”

  committed
  02a3d63

  Copy full SHA for 02a3d63

• Merge branch 'feat/fastjson-gadget-ssrf-common-jelly'

  Show description for 12436e2
  

  “threedr3am”

  committed
  12436e2

  Copy full SHA for 12436e2

• Merge branch 'feat/fastjson-gadget-ssrf-apache-cxf'

  

  “threedr3am”

  committed
  44203a7

  Copy full SHA for 44203a7

Pagination

Previous

Next