Fastjson扫描器,可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
-
Updated
Oct 7, 2022 - Go
Fastjson扫描器,可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
Java漏洞学习笔记 Deserialization Vulnerability
Web 版 Java Payload 生成与利用工具,提供 Java 反序列化、Hessian 1/2 反序列化等Payload生成,以及 JNDI、Fake Mysql、JRMPListener 等利用|The web version of Java Payload generation and utilization tool provides Payload generation such as Java deserialization and Hessian 1/2 deserialization, as well as JNDI, Fake Mysql, JRMPListener, etc
Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.
Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpickle module is used for deserialization of serialized data. I will update it with more attack vectors to targets other modules.
Java反序列化/JNDI注入/恶意类生成工具,支持多种高版本bypass,支持回显/内存马等多种扩展利用。
GPT AiCSA(Code security audit),SAST(Static Application Security Testing,静态应用程序安全测试),JAR security analysis, static vulnerability and vulnerability analysis of various programming language codes
Vulnerable webapp testbed
AiCSA,Move to https://github.com/hktalent/AiCSA
A JBoss Byteman rule to debug the trace the JDK deserialization filtering
Python Deserialization Payload Generator
PoC for CVE-2020-28032 (It's just a POP chain in WordPress < 5.5.2 for exploiting PHP Object Injection)
Ruby Deserialization Payload Generator
maptool unauthenticated rce exploit <1.8.0 beta2b
This project contains a Java deserialization vulnerability that is exploitable with some ysoserial payloads, but also contains a custom class that can be leveraged to get command execution upon deserialization.
Fake MySQL Server for Exploit Vulnerability of MySQL JDBC Driver
This tool is responsible to perform java deserialization attacks on server end points
Add a description, image, and links to the deserialization-vulnerability topic page so that developers can more easily learn about it.
To associate your repository with the deserialization-vulnerability topic, visit your repo's landing page and select "manage topics."