SummerSec/ShiroAttack2

shiro反序列化漏洞综合利用(仅限授权测试使用)

2.6kStars on the repository
5Mods indexed here, across every type
2mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

shiro-attack2

01

SummerSec/ShiroAttack2

Plugin Claude Code

A command-line security tool for testing Apache Shiro applications affected by the Shiro-550 remember-me deserialization vulnerability, also known as CVE-2016-4437. Deserialization is the process of turning stored data back into objects, which can be unsafe when untrusted data is accepted.

2.6k 2mo ago A tokens not measured original MIT

ShiroAttack2

02

SummerSec/ShiroAttack2

Plugin Claude Code

A security testing tool for Apache Shiro, a Java framework used for user login and access control. It covers Shiro-550 vulnerability testing, including key guessing, gadget-chain detection, command execution, memory-shell injection, and key changes.

2.6k 2mo ago A tokens not measured original MIT