Alternatives and similar repositories for ISC2022Code

Users that are interested in ISC2022Code are comparing it to the libraries listed below

• BeichenDream / JDR
  ☆139Updated 2 years ago
• xiaopan233 / Java_agent_without_file
  Java agent without file 无文件的Java agent
  ☆78Updated 3 years ago
• flowerwind / AutoGenerateXalanPayload
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆91Updated 2 years ago
• Rvn0xsy / DumperAnalyze
  通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩，可以做一些破解、加密验证的绕过等操作
  ☆113Updated last year
• hosch3n / FastjsonVulns
  [fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
  ☆92Updated 2 years ago
• ffadd / JNDIKit
  JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）
  ☆44Updated 3 years ago
• waderwu / nativeRasp
  nativeRasp that can hook native methods
  ☆24Updated 2 years ago
• luelueking / Bypass_JVM_Verifier
  Bypass JVM Class ByteCode Verifier , 对抗反编译器
  ☆112Updated last year
• 0xrumble / BytecodeScreen
  ☆50Updated 2 years ago
• 0linlin0 / Java
  java
  ☆54Updated 2 years ago
• KpLi0rn / LearnCompiler
  编译原理学习代码仓库
  ☆23Updated 3 years ago
• turn1tup / JvmRaspBypass
  ☆14Updated 2 years ago
• sf197 / MemoryShellHunter
  Java Agent memory horse scanner combined with Call Graph modus
  ☆62Updated 2 years ago
• su18 / rasp-vuln
  当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。
  ☆78Updated 2 years ago
• bigBestWay / ice
  Use java instrument API without JAR file
  ☆45Updated 3 years ago
• xyy-ws / NoAgent-memshell-scanner
  ☆107Updated 3 years ago
• bitterzzZZ / CVE-2021-43297-POC
  CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE
  ☆38Updated 3 years ago
• passer-W / snakeyaml-memshell
  springboot跨线程注入内存马
  ☆119Updated 3 years ago
• SummerSec / LookupInterface
  CodeQL 寻找 JNDI利用 Lookup接口
  ☆163Updated 3 years ago
• welk1n / FastjsonPocs
  一些结合第三方组件的Fastjson POC，在1.2.48以后版本中陆续被添加至黑名单。
  ☆56Updated 5 years ago
• H3rmesk1t / Fastjson-Gadgets-Automatic-Scanner
  Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …
  ☆50Updated 3 years ago
• TonyD0g / JSPHunter
  基于污点分析和模拟栈帧技术的JSP Webshell检测
  ☆45Updated 5 months ago
• Ape1ron / SpringAopInDeserializationDemo1
  在spring-aop中新发现的反序列化gadget-chain
  ☆46Updated 5 months ago
• mstxq17 / badGuyHacker
  一些自己打比赛的捣蛋脚本
  ☆50Updated 4 years ago
• zema1 / rawhttp
  A mininal go http client for security testing
  ☆48Updated 4 months ago
• cwkiller / JDBC-PROXY-Bypass
  利用代理驱动绕过JDBC Attack检测
  ☆71Updated last week
• lz2y / DubboPOC
  Apache Dubbo漏洞测试Demo及其POC
  ☆61Updated 2 years ago
• rmb122 / easyrasp
  简单实现的 Java RASP
  ☆35Updated 4 years ago
• threedr3am / fastjson-blacklist
  打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。
  ☆32Updated 5 years ago
• Y4Sec-Team / mysql-jdbc-tricks
  JDBC Attack Tricks
  ☆142Updated last year