fishso / marshalsec

一个Java编码、解码漏洞利用工具,加入了Dubbo-Hessian2和Apache Shiro PaddingOracle CBC的exploits,并修改了RMIRefServer,使用tomcat-el依赖,实现RMI攻击8u191以上版本jdk服务(TomcatELRMIRefServer)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

fishso/marshalsec Issues

No issues in this repository yet.