是一些比赛中的好题，加上自己出的一些。。。
☆43Jul 10, 2022Updated 3 years ago
Alternatives and similar repositories for ctf-Challenge
Users that are interested in ctf-Challenge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- 一个java代码审计辅助工具☆29Nov 2, 2022Updated 3 years ago
- javaDeserializeLabs☆71Apr 18, 2023Updated 3 years ago
- 备份下比赛附件☆22Jan 23, 2023Updated 3 years ago
- 添加Connector内存马与ws内存马检测逻辑☆16Oct 9, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Fastjson姿势技巧集合☆13Sep 18, 2022Updated 3 years ago
- ☆147Jan 16, 2023Updated 3 years ago
- dubbo快速利用exp，基本上老版本覆盖100%。☆162Jun 30, 2025Updated 11 months ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Jan 3, 2020Updated 6 years ago
- 简单实现的 Java RASP☆36Oct 14, 2020Updated 5 years ago
- java反序列化学习笔记☆16Nov 17, 2021Updated 4 years ago
- 关于学习java安全的一些知识,正在学习中ing,欢迎fork and star☆790Jul 11, 2023Updated 2 years ago
- Collection of CTF Web challenges I made☆28Feb 21, 2022Updated 4 years ago
- springboot跨线程注入内存马☆123Apr 10, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Go相关的安全研究☆235Nov 6, 2023Updated 2 years ago
- A neo4j procedure for tabby☆136May 17, 2025Updated last year
- EXP for CVE-2023-28434 MinIO unauthorized to RCE☆319Apr 4, 2023Updated 3 years ago
- Java Js Engine Payloads All in one☆291Aug 21, 2023Updated 2 years ago
- Java表达式语句生成器☆194Oct 9, 2023Updated 2 years ago
- Java 设计模式梳理☆36Jun 20, 2022Updated 3 years ago
- ☆12Aug 5, 2021Updated 4 years ago
- CVE-2020-4464 / CVE-2020-4450☆36Aug 24, 2021Updated 4 years ago
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆288Dec 13, 2024Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 记录学习codeql的过程☆398Jun 9, 2023Updated 3 years ago
- 用Java agent实现内存马等功能☆201Jul 27, 2023Updated 2 years ago
- （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）☆615Dec 29, 2021Updated 4 years ago
- ☆22Oct 7, 2022Updated 3 years ago
- 安全升级jar包时，辅助检测Java Archive (JAR) 包之间兼容性，各类符号引用的存在检测，包括方法、方法签名、字段定义和引用、类引用等等☆15Jul 7, 2024Updated last year
- Apache Dubbo漏洞测试Demo及其POC☆64Mar 27, 2023Updated 3 years ago
- ☆17Dec 15, 2021Updated 4 years ago
- The purpose of this script is to bypass disablefund, provide some useful information, and dig the hook function of PHP extension.☆14Jul 1, 2021Updated 4 years ago
- 对于安全学习的一些总结，更新ing，期待 Fork & Star！☆346Dec 26, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The function of the tool is to inject JNDI through LDAP☆29Dec 21, 2021Updated 4 years ago
- 关于我在CTF中的所有东西☆435Sep 22, 2025Updated 8 months ago
- 一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。☆377Oct 22, 2021Updated 4 years ago
- php反序列化靶场，集合了常见的php反序列化漏洞——由这周末在做梦制作☆154Mar 18, 2022Updated 4 years ago
- 基于污点分析和模拟栈帧技术的JSP Webshell检测☆47Sep 30, 2025Updated 8 months ago
- ☆16Jul 20, 2020Updated 5 years ago
- A declarative static analysis tool for jvm bytecode based Datalog like CodeQL☆342Jan 6, 2024Updated 2 years ago