Alternatives and similar repositories for ctf-Challenge

Users that are interested in ctf-Challenge are comparing it to the libraries listed below

• woodpecker-appstore / jexpr-encoder-utils
  Java表达式语句生成器
  ☆194Updated 2 years ago
• luelueking / Deserial_Sink_With_JDBC
  Some ReadObject Sink With JDBC
  ☆243Updated last year
• waderwu / javaDeserializeLabs
  javaDeserializeLabs
  ☆70Updated 2 years ago
• xsshim / VulnAnalysis
  《漏洞全解》该项目不提供任何的POC与EXP，仅仅分享各种机缘巧合下所产生的漏洞的分析。
  ☆26Updated 2 years ago
• safe6Sec / ShiroAndFastJson
  shiro加fastjson环境
  ☆146Updated 3 years ago
• Y4tacker / HackingFernFlower
  2023白帽补天大会部分代码
  ☆129Updated 2 years ago
• ax1sX / RouteCheck-Alpha
  A Java Route Collection Tool
  ☆102Updated last year
• Lonely-night / fastjsonVul
  fastjson 80 远程代码执行漏洞复现
  ☆199Updated 3 years ago
• kezibei / fastjson_payload
  ☆234Updated 8 months ago
• l3yx / jdwp-codeifier
  基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）
  ☆319Updated last year
• dushixiang / evil-mysql-server
  evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.
  ☆97Updated 3 years ago
• minhangxiaohui / DecodeSomeJSPWebshell
  冰蝎、哥斯拉 jsp webshell通信流量解密器
  ☆145Updated 2 years ago
• Awrrays / Frame-DefaultPass
  所有碰到过的默认口令
  ☆107Updated last year
• yuanhaiGreg / Fuzz-Dict
  一些常见字典
  ☆174Updated 4 years ago
• YYHYlh / Apache-Dubbo-CVE-2023-23638-exp
  Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
  ☆230Updated 2 years ago
• whocansee / FilelessAgentMemShell
  无需文件落地Agent内存马生成器
  ☆247Updated last year
• ffffffff0x / JVWA
  java 代码审计学习靶场
  ☆118Updated 2 years ago
• ruyueattention / java-memshell-scanner
  通过jsp脚本扫描并查杀Tomcat内存马，当前支持Servlet-api、Tomcat-Value、Timer、Websocket 、Upgrade 、ExecutorShell内存马的查杀逻辑。
  ☆66Updated 2 years ago
• safe6Sec / MemoryShell
  内存马学习
  ☆172Updated 3 years ago
• whwlsfb / SpringSpider
  Spring Actuator端点的BurpSuite被动扫描插件。
  ☆203Updated 3 years ago
• Boogipop / JavaSec
  JavaSec
  ☆43Updated last year
• yuyan-sec / druid_sessions
  获取 alibaba druid 一些 sessions , sql , urls
  ☆291Updated 10 months ago
• AfterSnows / ApricusFindEvil
  检测查杀java内存马
  ☆126Updated 2 years ago
• yaklang / syntaxflow
  Lessons for syntaxflow zero to hero
  ☆53Updated last year
• Whoopsunix / fastjson_study
  Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul
  ☆96Updated 2 years ago
• ttonys / CodeQLAnalyseJar
  CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库
  ☆42Updated 3 years ago
• threedr3am / dubbo-exp
  dubbo快速利用exp，基本上老版本覆盖100%。
  ☆161Updated 7 months ago
• yzddmr6 / Java-Js-Engine-Payloads
  Java Js Engine Payloads All in one
  ☆289Updated 2 years ago
• A0WaQ4 / HexDnsEchoT
  命令执行不回显但DNS协议出网的命令回显场景解决方案（修改为使用ceye接收请求，添加自定义DNS服务器）
  ☆292Updated 2 years ago
• p1n93r / SpringBootAdmin-thymeleaf-SSTI
  SpringBootAdmin-thymeleaf-SSTI which can cause RCE
  ☆86Updated 2 years ago