是一些比赛中的好题，加上自己出的一些。。。
☆43Jul 10, 2022Updated 3 years ago
Alternatives and similar repositories for ctf-Challenge
Users that are interested in ctf-Challenge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- 一个java代码审计辅助工具☆29Nov 2, 2022Updated 3 years ago
- javaDeserializeLabs☆70Apr 18, 2023Updated 2 years ago
- 备份下比赛附件☆22Jan 23, 2023Updated 3 years ago
- 添加Connector内存马与ws内存马检测逻辑☆16Oct 9, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Fastjson姿势技巧集合☆13Sep 18, 2022Updated 3 years ago
- dubbo快速利用exp，基本上老版本覆盖100%。☆161Jun 30, 2025Updated 8 months ago
- ☆147Jan 16, 2023Updated 3 years ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Jan 3, 2020Updated 6 years ago
- 简单实现的 Java RASP☆35Oct 14, 2020Updated 5 years ago
- java反序列化学习笔记☆16Nov 17, 2021Updated 4 years ago
- 关于学习java安全的一些知识,正在学习中ing,欢迎fork and star☆792Jul 11, 2023Updated 2 years ago
- Collection of CTF Web challenges I made☆28Feb 21, 2022Updated 4 years ago
- springboot跨线程注入内存马☆123Apr 10, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- Go相关的安全研究☆234Nov 6, 2023Updated 2 years ago
- A neo4j procedure for tabby☆137May 17, 2025Updated 10 months ago
- EXP for CVE-2023-28434 MinIO unauthorized to RCE☆319Apr 4, 2023Updated 2 years ago
- Java Js Engine Payloads All in one☆291Aug 21, 2023Updated 2 years ago
- Java表达式语句生成器☆194Oct 9, 2023Updated 2 years ago
- Java 设计模式梳理☆36Jun 20, 2022Updated 3 years ago
- ☆12Aug 5, 2021Updated 4 years ago
- CVE-2020-4464 / CVE-2020-4450☆36Aug 24, 2021Updated 4 years ago
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆282Dec 13, 2024Updated last year
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 记录学习codeql的过程☆394Jun 9, 2023Updated 2 years ago
- 用Java agent实现内存马等功能☆198Jul 27, 2023Updated 2 years ago
- （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）☆614Dec 29, 2021Updated 4 years ago
- ☆21Oct 7, 2022Updated 3 years ago
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆14Jul 7, 2024Updated last year
- Apache Dubbo漏洞测试Demo及其POC☆65Mar 27, 2023Updated 2 years ago
- 对于安全学习的一些总结，更新ing，期待 Fork & Star！☆342Dec 26, 2023Updated 2 years ago
- ☆17Dec 15, 2021Updated 4 years ago
- The purpose of this script is to bypass disablefund, provide some useful information, and dig the hook function of PHP extension.☆14Jul 1, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The function of the tool is to inject JNDI through LDAP☆28Dec 21, 2021Updated 4 years ago
- 关于我在CTF中的所有东西☆423Sep 22, 2025Updated 6 months ago
- 一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。☆376Oct 22, 2021Updated 4 years ago
- php反序列 化靶场，集合了常见的php反序列化漏洞——由这周末在做梦制作☆155Mar 18, 2022Updated 4 years ago
- ☆16Jul 20, 2020Updated 5 years ago
- 基于污点分析和模拟栈帧技术的JSP Webshell检测☆48Sep 30, 2025Updated 5 months ago
- ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。☆755Jan 11, 2024Updated 2 years ago