Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on May 26, 2020

• fix:注释catalina

  

  “threedr3am”

  committed
  d1da55b

  Copy full SHA for d1da55b

• fix:ldap server

  

  “threedr3am”

  committed
  85faeb6

  Copy full SHA for 85faeb6

Commits on May 25, 2020

• feat:spring-session-data-redis RCE

  

  “threedr3am”

  committed
  1b079d1

  Copy full SHA for 1b079d1

Commits on May 20, 2020

• Merge branch 'java-compile'

  Show description for 9dff6f8
  

  “threedr3am”

  committed
  9dff6f8

  Copy full SHA for 9dff6f8

• op:LdapServer.java

  

  “threedr3am”

  committed
  9951e8b

  Copy full SHA for 9951e8b

Commits on May 19, 2020

• op:sync-session-bug README.md

  

  “threedr3am”

  committed
  bea7883

  Copy full SHA for bea7883

• feat:添加tomcat session集群同步功能RCE exp

  

  “threedr3am”

  committed
  8506ee4

  Copy full SHA for 8506ee4

Commits on May 12, 2020

• add:添加点奇怪的东西

  

  “threedr3am”

  committed
  bb85a30

  Copy full SHA for bb85a30

Commits on May 10, 2020

• feat:add apache-poi

  

  “threedr3am”

  committed
  95ff048

  Copy full SHA for 95ff048

• add:fastjson gadget bypass 1.2.68 autoType - leak

  

  “threedr3am”

  committed
  08602ce

  Copy full SHA for 08602ce

Commits on May 6, 2020

• Merge branch 'feat/data-feature'

  Show description for 91f5208
  

  “threedr3am”

  committed
  91f5208

  Copy full SHA for 91f5208

• 一些java攻击特征的匹配

  

  “threedr3am”

  committed
  5468097

  Copy full SHA for 5468097

• add:Catalina Calc exec

  

  “threedr3am”

  committed
  143b5e5

  Copy full SHA for 143b5e5

• op:actuator add spring-boot maven plugin

  

  “threedr3am”

  committed
  cd2fa15

  Copy full SHA for cd2fa15

Commits on May 5, 2020

• feat:java-compile

  

  “threedr3am”

  committed
  1e98f58

  Copy full SHA for 1e98f58

Commits on Apr 14, 2020

• feat:add WebShell

  

  “threedr3am”

  committed
  dc8a8dc

  Copy full SHA for dc8a8dc

Commits on Apr 7, 2020

• op:nexus CVE-2020-10199

  

  “threedr3am”

  committed
  93d57c4

  Copy full SHA for 93d57c4

• Merge branch 'nexus'

  

  “threedr3am”

  committed
  c296857

  Copy full SHA for c296857

• feat:fastjson一种利用$ref几乎任意getter触发的方法

  

  “threedr3am”

  committed
  ea61297

  Copy full SHA for ea61297

• feat:添加jackson-gadget

  

  “threedr3am”

  committed
  f201def

  Copy full SHA for f201def

Commits on Apr 4, 2020

• feat:nexus CVE-2020-10199

  

  “threedr3am”

  committed
  e93a761

  Copy full SHA for e93a761

Commits on Apr 3, 2020

• fix:nexus-CVE-2020-11444

  

  “threedr3am”

  committed
  cd725d1

  Copy full SHA for cd725d1

• feat:添加nexus

  

  “threedr3am”

  committed
  964a009

  Copy full SHA for 964a009

Commits on Mar 27, 2020

• feat:apache shiro CVE-2020-1957的实际生产环境bypass例子

  

  “threedr3am”

  committed
  94979ad

  Copy full SHA for 94979ad

• fix:shiro错误实例

  

  “threedr3am”

  committed
  b90bf78

  Copy full SHA for b90bf78

• Merge branch 'shiro'

  

  “threedr3am”

  committed
  efdff37

  Copy full SHA for efdff37

• feat:添加apache shiro CVE-2020-1957 authentication bypass.

  

  “threedr3am”

  committed
  d0c615e

  Copy full SHA for d0c615e

Commits on Mar 26, 2020

• Merge branch 'shiro'

  

  “threedr3am”

  committed
  d1f49af

  Copy full SHA for d1f49af

• feat:添加shiro 1.4.1版本及以前的认证bypass环境和以及复现

  

  “threedr3am”

  committed
  cb6d7a3

  Copy full SHA for cb6d7a3

Commits on Mar 25, 2020

• feat:添加fastjson dos payload

  

  “threedr3am”

  committed
  ca02064

  Copy full SHA for ca02064

• feat:添加一点点fastjson gadget

  

  “threedr3am”

  committed
  1a71533

  Copy full SHA for 1a71533

Commits on Mar 19, 2020

• feat:添加shiro的jackson gadget

  

  “threedr3am”

  committed
  b56f8f7

  Copy full SHA for b56f8f7

Commits on Mar 16, 2020

• fix:两个鸡肋中的鸡肋gadget

  

  “threedr3am”

  committed
  b9a9ddf

  Copy full SHA for b9a9ddf

• feat:新增jackson和fastjson通用鸡肋caucho-quercus RCE gadget

  

  “threedr3am”

  committed
  aadbd9d

  Copy full SHA for aadbd9d

• feat:发现同一个jar包下还有另一个gadget-org.apache.aries.transaction.jms.RecoverablePooledConnectionFactory，捡漏时间到了

  

  “threedr3am”

  committed
  85a30e7

  Copy full SHA for 85a30e7

Pagination

Previous

Next