是一些比赛中的好题，加上自己出的一些。。。
☆43Jul 10, 2022Updated 3 years ago
Alternatives and similar repositories for ctf-Challenge
Users that are interested in ctf-Challenge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- 一个java代码审计辅助工具☆29Nov 2, 2022Updated 3 years ago
- javaDeserializeLabs☆70Apr 18, 2023Updated 3 years ago
- 备份下比赛附件☆22Jan 23, 2023Updated 3 years ago
- 添加Connector内存马与ws内存马检测逻辑☆16Oct 9, 2022Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Fastjson姿势技巧集合☆13Sep 18, 2022Updated 3 years ago
- ☆146Jan 16, 2023Updated 3 years ago
- dubbo快速利用exp，基本上老版本覆盖100%。☆161Jun 30, 2025Updated 10 months ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Jan 3, 2020Updated 6 years ago
- 简单实现的 Java RASP☆36Oct 14, 2020Updated 5 years ago
- java反序列化学习笔记☆16Nov 17, 2021Updated 4 years ago
- 关于学习java安全的一些知识,正在学习中ing,欢迎fork and star☆790Jul 11, 2023Updated 2 years ago
- Collection of CTF Web challenges I made☆28Feb 21, 2022Updated 4 years ago
- springboot跨线程注入内存马☆123Apr 10, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Go相关的安全研究☆234Nov 6, 2023Updated 2 years ago
- A neo4j procedure for tabby☆136May 17, 2025Updated last year
- EXP for CVE-2023-28434 MinIO unauthorized to RCE☆320Apr 4, 2023Updated 3 years ago
- Java Js Engine Payloads All in one☆292Aug 21, 2023Updated 2 years ago
- Java表达式语句生成器☆194Oct 9, 2023Updated 2 years ago
- Java 设计模式梳理☆36Jun 20, 2022Updated 3 years ago
- ☆12Aug 5, 2021Updated 4 years ago
- CVE-2020-4464 / CVE-2020-4450☆36Aug 24, 2021Updated 4 years ago
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆283Dec 13, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 用Java agent实现内存马等功能☆201Jul 27, 2023Updated 2 years ago
- 记录学习codeql的过程☆397Jun 9, 2023Updated 2 years ago
- （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）☆615Dec 29, 2021Updated 4 years ago
- ☆21Oct 7, 2022Updated 3 years ago
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆14Jul 7, 2024Updated last year
- Apache Dubbo漏洞测试Demo及其POC☆64Mar 27, 2023Updated 3 years ago
- ☆17Dec 15, 2021Updated 4 years ago
- The purpose of this script is to bypass disablefund, provide some useful information, and dig the hook function of PHP extension.☆14Jul 1, 2021Updated 4 years ago
- 对于安全学习的一些总结，更新ing，期待 Fork & Star！☆344Dec 26, 2023Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- The function of the tool is to inject JNDI through LDAP☆29Dec 21, 2021Updated 4 years ago
- 关于我在CTF中的所有东西☆431Sep 22, 2025Updated 8 months ago
- 一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。☆377Oct 22, 2021Updated 4 years ago
- php反序列化靶场，集合了常见的php反序列化漏洞——由这周末在做梦制作☆156Mar 18, 2022Updated 4 years ago
- 基于污点分析和模拟栈帧技术的JSP Webshell检测☆47Sep 30, 2025Updated 7 months ago
- ☆16Jul 20, 2020Updated 5 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆341Jan 6, 2024Updated 2 years ago