LandGrey/SpringBootVulExploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

rcespring-actuator-vulnerabilityspring-boot-vulnerabilityspring-vulnerabilityspringbootspringboot-actuator-rcespringcloudvulnerability

License & maintenance

No license stated: by default nobody may reuse the code. Ask the authors before using it in a product.

Last code push 5 years ago.

	Repository	Stars	Language	License	Activity
1	zhoutaoo/SpringCloudOpensabre是基于SpringCloud2023的微服务开发平台，整合了Spring Security、Springcloud Alibaba等组件。包含了基础的RBAC权限管理、授权认证、网关管理、服务治理、审计日志等系统管理基础应用。定义了相关开发规范、风格并落	★ 8.9k	—	Apache-2.0	Active
2	chaitin/xray一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc \| 使用之前务必先阅读文档	★ 11.8k	Vue	Other	Stale
3	frohoff/ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.	★ 9.1k	Java	MIT	Slowing
4	nomi-sec/PoC-in-GitHub📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.	★ 8.1k	—	CC0-1.0	Active
5	reddelexc/hackerone-reportsTop disclosed reports from HackerOne	★ 6.6k	Python	—	Active
6	fatedier/frpA fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.	★ 110k	Go	Apache-2.0	Active
7	sherlock-project/sherlockHunt down social media accounts by username across social networks	★ 94.4k	Python	MIT	Active
8	NationalSecurityAgency/ghidraGhidra is a software reverse engineering (SRE) framework	★ 90.7k	Java	Apache-2.0	Active