0Kee-Team / JavaProbe
A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
☆203Updated 3 years ago
Related projects: ⓘ
- ☆202Updated this week
- ☆111Updated this week
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆213Updated 4 years ago
- rmi、jndi、ldap、jrmp、jmx、jms一些demo测试☆306Updated 2 years ago
- QAQ Just study unserialize vulnerabilities in Java :)☆196Updated 6 years ago
- ☆263Updated this week
- ☆205Updated this week
- web模糊测试 - 将漏洞可能性放大☆148Updated 5 years ago
- 又一个Java Web代码审计工具☆99Updated 6 years ago
- OpenRASP 漏洞测试环境☆300Updated 10 months ago
- exploit for fastjson remote code execution vulnerability☆152Updated last year
- Java Security Documents☆79Updated 5 years ago
- Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch☆113Updated 6 years ago
- SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.☆102Updated 6 years ago
- 用于检测maven项目的第三方依赖组件是否存在安全漏洞。☆99Updated 2 years ago
- 基于 Docker 的真实应用测试环境☆262Updated last year
- s2-057 最新漏洞分析和EXP脚本☆151Updated 4 years ago
- ☆39Updated 6 years ago
- Web App Monitor☆228Updated 6 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆166Updated 5 years ago
- 分析验证安全漏洞，仅供学习☆21Updated 4 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆436Updated 2 years ago
- 更快速的进行Web应用指纹识别☆168Updated 5 years ago
- Java通用漏洞修复安全组件☆58Updated 6 years ago
- ☆76Updated this week
- Security Knowledge Structure(安全知识汇总)☆242Updated 5 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆121Updated 2 years ago
- 整理收集Struts2漏洞环境☆261Updated 6 years ago
- RMI 反序列化环境 一步步☆211Updated 4 years ago