← Browse
shiro-attack2
SummerSec ★ 2639
ShiroAttack2 is an exploitation tool for Apache Shiro CVE-2016-6802 (Shiro-550) that performs AES key brute-forcing, gadget chain detection, command execution, in-memory shell injection, and key replacement via a unified attack service shared between JavaFX GUI and CLI modes. The tool supports multiple CommonsBeanutils gadget variants, automatic AES mode switching (CBC/GCM), and structured JSON output for scripting and AI integration.
Install
> /plugin marketplace add SummerSec/ShiroAttack2
> /plugin install shiro-attack2
What it's made of
1 skill
- Commands
- 0
- Agents
- 0
- Skills
- 1
- MCP servers
- 0
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
- none
- Talks to
- nothing external detected
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (SummerSec).