shiro plugins

SummerSec/ShiroAttack2

Plugin Claude Code

A command-line security tool for testing Apache Shiro applications affected by the Shiro-550 remember-me deserialization vulnerability, also known as CVE-2016-4437. Deserialization is the process of turning stored data back into objects, which can be unsafe when untrusted data is accepted.

SummerSec/ShiroAttack2

Plugin Claude Code

A security testing tool for Apache Shiro, a Java framework used for user login and access control. It covers Shiro-550 vulnerability testing, including key guessing, gadget-chain detection, command execution, memory-shell injection, and key changes.