零基础Java安全学习笔记
☆73Mar 31, 2026Updated 7 months ago
Alternatives and similar repositories for JavaSec
Users that are interested in JavaSec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 整理容器逃逸相关的漏洞和exploits.☆15Apr 17, 2024Updated 2 years ago
- 在Java安全学习过程中的笔记和代码☆123Oct 11, 2026Updated 3 weeks ago
- 通过生成不同hash的ico并写入程序中，实现批量bypass360QVM☆259Aug 10, 2023Updated 3 years ago
- Java代码审计学习笔记☆13Dec 20, 2024Updated last year
- PHP文件上传50+绕过手法全景解析☆17Mar 16, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 个人学习Java安全的笔记☆135May 5, 2023Updated 3 years ago
- 打造最强的Java安全研究与安全开发面试题库，帮助师傅们找到满意的工作☆203Feb 14, 2022Updated 4 years ago
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- 主要用于隐藏进程真实路径，进程带windows真签名☆117Oct 15, 2024Updated 2 years ago
- 记录一下 Java 安全学习历程，也算是半条学习路线了☆1,399Jun 26, 2025Updated last year
- 高版本Fastjson在Java原生反序列化中的利用演示☆26Jan 12, 2025Updated last year
- A dictionary commonly used in testing☆12Aug 23, 2024Updated 2 years ago
- JavaAgent内存马实现、检测、修复demo☆11Dec 7, 2022Updated 3 years ago
- 利用代理驱动绕过JDBC Attack检测☆144Jun 15, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆97Jun 15, 2026Updated 4 months ago
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,613Updated this week
- 当前仅限于8.4和8.5☆17May 4, 2026Updated 6 months ago
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆125Jul 30, 2026Updated 3 months ago
- 一款用于安全测试中信息收集的自动化工具☆148Aug 6, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- 一键修改exe、dll的编译时间、创建时间、修改时间和访问时间☆197Apr 16, 2023Updated 3 years ago
- Java内存马教程☆160Jul 8, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- c3p0 new gadget☆28Apr 1, 2025Updated last year
- jeecg-boot密码离线爆破☆110Nov 22, 2024Updated last year
- TongWebExploit 是一款面向 TongWeb 反序列化漏洞场景的图形化检测与利用工具，支持漏洞探测、命令回显、EL 表达式执行、内存马注入和批量检测。☆54Jun 20, 2026Updated 4 months ago
- 常用功能的DLL插件☆85Sep 24, 2025Updated last year
- Java反序列化漏洞Gadget Chain可视化图谱工具☆18May 22, 2026Updated 5 months ago
- JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互U…☆887Jun 9, 2026Updated 4 months ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆56Sep 6, 2022Updated 4 years ago
- BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel☆29Jun 13, 2024Updated 2 years ago
- Java bytecode line number restoration tool☆144Aug 31, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆36Mar 19, 2026Updated 7 months ago
- Jetty&JDK 均为高版本下的内存马注入☆17Sep 3, 2025Updated last year
- blog☆12Jan 22, 2025Updated last year
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆888Jun 24, 2024Updated 2 years ago
- ☆1,081May 31, 2026Updated 5 months ago
- 对指定目录下进行敏感信息检索☆15Feb 14, 2025Updated last year
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆134Oct 12, 2024Updated 2 years ago