Pinned Repositories
JNDIExploit
A malicious LDAP server for JNDI injection attacks
learnjavabug
Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
NET-Deserialize
总结了十篇.Net反序列化文章,持续更新
rogue_mysql_server
一个支持 go, php, python, java, 原生命令行等多种语言下客户端的 mysql 恶意服务器
SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
ysoserial.net
Deserialization payload generator for a variety of .NET formatters
Eason-A8's Repositories
Eason-A8/rogue_mysql_server
一个支持 go, php, python, java, 原生命令行等多种语言下客户端的 mysql 恶意服务器
Eason-A8/JNDIExploit
A malicious LDAP server for JNDI injection attacks
Eason-A8/learnjavabug
Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Eason-A8/NET-Deserialize
总结了十篇.Net反序列化文章,持续更新
Eason-A8/SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
Eason-A8/ysoserial.net
Deserialization payload generator for a variety of .NET formatters