Apache Shiro 反序列化漏洞检测与利用工具

pyyso is a Python package that generate java serialized poc. Including CommonsCollections1-7, JDK7u21, JDK8u20, ldap for jndi, shiro-550, CommonsBeanutils1 no cc, JRMPClient, high version JDK Bypass, Fake MySQL for JDBC attack

This is a demonstration of Flask and web.py with WTForms running on Jython and uses Apache Shiro, Java security framework that performs authentication, authorization, cryptography, and session management.