Y4er/CVE-2020-14645

Stars
79
Rank 408,196 (Top 9 %)
Language
Java
License
GNU General Publi...
Created over 4 years ago
Updated over 4 years ago

Y4er/CVE-2020-14645

Y4er

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()

ysoserial

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

WebLogic-Shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

dotnet-deserialization

dotnet 反序列化学习笔记

CVE-2020-2551

Weblogic IIOP CVE-2020-2551

fastjson-bypass-autotype-1.2.68

fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.

CVE-2020-2883

Weblogic coherence.jar RCE

CVE-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

yaml-payload

Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg

openam-CVE-2021-35464

openam-CVE-2021-35464 tomcat 执行命令回显

CVE-2020-14756

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar

javaagent-tomcat-memshell

使用java agent反序列化注入内存shell

CVE-2021-35215

SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE

Y4er