Discover @Y4er Open Source projects

@Y4er

Y4er

Stars
3,013
Global Rank 9,793 (Top 0.4 %)
Followers 1,854
Following 302
Registered over 6 years ago
Most used languages

Java
90.9 %

Python
9.1 %

ysoserial

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

WebLogic-Shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

dotnet-deserialization

dotnet 反序列化学习笔记

CVE-2020-2551

Weblogic IIOP CVE-2020-2551

fastjson-bypass-autotype-1.2.68

fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.

CVE-2020-2883

Weblogic coherence.jar RCE

CVE-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

yaml-payload

Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg

openam-CVE-2021-35464

openam-CVE-2021-35464 tomcat 执行命令回显

CVE-2020-14645

Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()

CVE-2020-14756

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar

javaagent-tomcat-memshell

使用java agent反序列化注入内存shell

CVE-2021-35215

SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE

Y4er