JavaSec
☆46Mar 18, 2024Updated 2 years ago
Alternatives and similar repositories for JavaSec
Users that are interested in JavaSec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hacking GraalVM Espresso - Abusing Continuation API to Make ROP-like Attack☆36Aug 27, 2025Updated last year
- CVE-2023-38646 Metabase RCE☆53Oct 11, 2023Updated 3 years ago
- Java Chains 插件编写 demo☆14Aug 9, 2026Updated 2 months ago
- 一款基于污点分析的PHP扫描工具，能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径，同时支持单独对函数的扫描。☆174Apr 10, 2025Updated last year
- Some ReadObject Sink With JDBC☆243May 8, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆22Nov 11, 2022Updated 3 years ago
- 一些总结出来的gadget的flow，后续合适和加入新的flow☆70Dec 6, 2025Updated 10 months ago
- 存放 MemShellParty 或其他场景下需要使用的 jar 包，仅用于学习交流☆10Jun 12, 2026Updated 4 months ago
- 一个专注于 Java Web 特性、配置和 Trick 的安全谜题集合☆131Dec 24, 2025Updated 10 months ago
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆589Feb 7, 2026Updated 8 months ago
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆109Nov 7, 2024Updated last year
- A pure TypeScript/JavaScript decompiler for Java bytecode. Runs in browsers and Node.js — no JVM, WebAssembly, or runtime dependencies.☆22Updated this week
- Java bytecode line number restoration tool☆144Aug 31, 2025Updated last year
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆288Dec 13, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 基于多种策略, 对已有 JAR 包中的全限定类名进行变换, 无限生成高度相似的虚假类名☆20Jul 30, 2025Updated last year
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- ASP & ASP.NET WebShell Bypass☆73Jan 4, 2026Updated 9 months ago
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆601May 4, 2026Updated 5 months ago
- 集权利用工具☆166Feb 28, 2025Updated last year
- 多功能 java agent 内存马☆527Oct 8, 2023Updated 3 years ago
- My presentation slides☆18Oct 31, 2025Updated last year
- ☆10Sep 27, 2023Updated 3 years ago
- Fastjson + MySQL 条件下不出网利用测试环境☆51Dec 6, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆183Apr 17, 2024Updated 2 years ago
- 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY …☆830Sep 18, 2023Updated 3 years ago
- echow is a small tool that generates echo commands to write binary files. echow 是一个生成 echo 命令来写入二进制文件的小工具。☆12Dec 11, 2022Updated 3 years ago
- ☆79Nov 22, 2024Updated last year
- CVE-2023-22527 内存马注入工具☆75Feb 21, 2024Updated 2 years ago
- [ALL IN ONE] Everything that I shared to public about Cloud Security is here.☆66Apr 19, 2025Updated last year
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,611Updated this week
- 一个基于 Vineflower 引擎的多线程 Java 批量反编译工具，支持快速处理大量的 class 文件和 JAR 文件。☆60Apr 28, 2025Updated last year
- MemShell List☆92Jul 18, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆141Mar 11, 2024Updated 2 years ago
- 利用代理驱动绕过JDBC Attack检测☆144Jun 15, 2025Updated last year
- 一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.☆2,228Aug 21, 2025Updated last year
- CVE-2022-22947 memshell☆18Mar 18, 2022Updated 4 years ago
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- 检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare☆81Oct 23, 2023Updated 3 years ago
- 宏景ehr sql注入的tamper脚本（sqlmap使用）☆35Jun 14, 2023Updated 3 years ago