Projects sharing features with Mysql Fake Server

Marshalsec is a toolkit designed for generating malicious serialized Java objects to achieve remote code execution during the unmarshalling process. It functions as a Java deserialization exploit tool and a framework for triggering Java Naming and Directory Interface lookups to remote servers. The project provides a JNDI redirector service that intercepts lookups and points targets toward a remote codebase. It includes utilities for crafting payloads that force Java applications to download and execute arbitrary classes from a remote URL. The toolset covers security analysis activities inclu

Redis(<=5.0.5) RCE

JNDIExploit or a ysoserial.

This project is a cross-platform desktop application that provides a graphical interface for managing and interacting with Redis databases. Built as a standalone software program, it functions as a centralized connection manager that allows users to visualize data structures, perform administrative tasks, and inspect records across multiple database environments. The application distinguishes itself through its integration with external processes and command-line workflows. Users can define custom viewers to render specific data formats using external tools and launch the interface directly f

ODAT: Oracle Database Attacking Tool

Redis 4.x/5.x RCE

MDUT - Multiple Database Utilization Tools

SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xpcmdshell与spoacreate执行命令回显和clr加载程序集执行相应操作。

A helpful Java Deserialization exploit framework.

Yakit is a comprehensive cybersecurity all-in-one platform designed for security assessments. It integrates a suite of core tools including an HTTP interception proxy for real-time traffic modification, an out-of-band interaction detector for verifying remote command execution via TCP, DNSLog, and ICMP, and a reverse shell manager for controlling remote server connections. The platform is distinguished by its dedicated security scripting environment, which allows for the development and execution of custom logic and plugins using a specialized high-performance language. It further extends fun