Barro/java-afl external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Barro/java-afl

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Barro/java-afl)

Close

Barro / java-aflView on GitHubMore

• External links
• Readme badge

Binary rewriting approach with fork server support to fuzz Java applications with afl-fuzz.

☆91May 3, 2018Updated 8 years ago

Alternatives and similar repositories for java-afl

Users that are interested in java-afl are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• isstac / kelinci

  View on GitHub
  AFL-based fuzzing for Java
  ☆241Jan 26, 2020Updated 6 years ago
• modzero / mod0javaFuzzingResults

  View on GitHub
  Result files from various fuzzing runs
  ☆16Oct 18, 2021Updated 5 years ago
• br0ns / pow

  View on GitHub
  Proof of Work generator
  ☆12Jun 26, 2019Updated 7 years ago
• rohanpadhye / JQF

  View on GitHub
  JQF + Zest: Coverage-guided semantic fuzzing for Java.
  ☆744Jul 22, 2026Updated 3 months ago
• mogwailabs / deserialization-filter-blacklists

  View on GitHub
  Native Java serialization filter blacklist for common gadgets
  ☆20Sep 12, 2019Updated 7 years ago
• Open source password manager - Proton Pass • Ad
  Securely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
• fuzzitdev / javafuzz

  View on GitHub
  coverage guided fuzz testing for java
  ☆230Apr 30, 2021Updated 5 years ago
• codeplutos / java-stack-trace

  View on GitHub
  ☆18Jul 30, 2018Updated 8 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 7 years ago
• ucla-pls / jreduce

  View on GitHub
  JReduce is a tool to reduce Java ByteCode
  ☆13Oct 12, 2021Updated 5 years ago
• Bort-Millipede / WLT3Serial

  View on GitHub
  Native Java-based deserialization exploit for WebLogic T3 (and T3S) listeners.
  ☆34Mar 2, 2020Updated 6 years ago
• baidu-security / openrasp-iast

  View on GitHub
  IAST 灰盒扫描工具
  ☆448Jul 19, 2022Updated 4 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload

  View on GitHub
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Feb 8, 2020Updated 6 years ago
• GrrrDog / ZeroNights-HackQuest-2016

  View on GitHub
  2 web tasks from ZeroNights HackQuest 2016
  ☆49Mar 24, 2017Updated 9 years ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆94Jan 17, 2023Updated 3 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• gmu-swe / phosphor

  View on GitHub
  Phosphor: Dynamic Taint Tracking for the JVM
  ☆182Jun 17, 2025Updated last year
• FoRTE-Research / UnTracer-AFL

  View on GitHub
  An AFL implementation with UnTracer (our coverage-guided tracer)
  ☆125Jul 7, 2022Updated 4 years ago
• bbowman410 / VGraph

  View on GitHub
  Vulnerable code clone detection technique. Published in EuroS&P2020
  ☆10Sep 4, 2020Updated 6 years ago
• qzhang-ucr / BigFuzz

  View on GitHub
  ☆12Jun 14, 2023Updated 3 years ago
• Ramos-dev / graph4code

  View on GitHub
  超硬核！使用图数据技术发现软件漏洞
  ☆184Sep 1, 2021Updated 5 years ago
• Jarijaas / helsec-1103

  View on GitHub
  ☆22Nov 3, 2022Updated 3 years ago
• CodeIntelligenceTesting / jazzer

  View on GitHub
  Coverage-guided, in-process fuzzing for the JVM
  ☆1,262Updated this week
• JackOfMostTrades / gadgetinspector

  View on GitHub
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,093Jun 15, 2021Updated 5 years ago
• mishmashclone / GrrrDog-Java-Deserialization-Cheat-Sheet

  View on GitHub
  https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
  ☆54Sep 11, 2021Updated 5 years ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• secure-software-engineering / sootdiff

  View on GitHub
  SootDiff - Bytecode Comparison Across Different Java Compilers
  ☆19May 24, 2024Updated 2 years ago
• math1as / Windows-GDI-fuzzer

  View on GitHub
  Windows Graphics Device Interface (GDI+) fuzzer
  ☆130Aug 13, 2020Updated 6 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆454Mar 24, 2022Updated 4 years ago
• GrrrDog / Sploits

  View on GitHub
  Place for random PoCs
  ☆17May 21, 2020Updated 6 years ago
• frohoff / inspector-gadget

  View on GitHub
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆110May 12, 2016Updated 10 years ago
• pwntester / JRE8u20_RCE_Gadget

  View on GitHub
  JRE8u20_RCE_Gadget
  ☆254Jul 1, 2016Updated 10 years ago
• Contrast-Security-OSS / joogle

  View on GitHub
  A static analysis API for finding deserialization attack gadgets
  ☆39Nov 7, 2022Updated 3 years ago
• threedr3am / log-agent

  View on GitHub
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆123Jul 17, 2020Updated 6 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• 0vulns / twitter-card-backdoor

  View on GitHub
  A backdoor embedded with Twitter Player Card
  ☆12May 1, 2017Updated 9 years ago
• veracode-research / actuator-testbed

  View on GitHub
  A vulnerable application exposing Spring Boot Actuators
  ☆123Feb 25, 2019Updated 7 years ago
• Arusekk / ascii-zip

  View on GitHub
  A deflate compressor that emits compressed data that is in the [A-Za-z0-9] ASCII byte range.
  ☆41Jan 25, 2022Updated 4 years ago
• Ant-FG-Lab / non_RCE

  View on GitHub
  ☆41Mar 10, 2021Updated 5 years ago
• uknowsec / Frida-Hook-In-Java-Notes

  View on GitHub
  Java层frida hook学习笔记 https://uknowsec.cn
  ☆47Feb 6, 2020Updated 6 years ago
• wmliang / checksec-win

  View on GitHub
  checksec tool for win10
  ☆25Aug 21, 2017Updated 9 years ago
• motikan2010 / CVE-2020-5398

  View on GitHub
  CVE-2020-5398 - RFD(Reflected File Download) Attack for Spring MVC
  ☆84Dec 15, 2022Updated 3 years ago