Java代码审计学习笔记
☆13Dec 20, 2024Updated last year
Alternatives and similar repositories for JavaSecurity
Users that are interested in JavaSecurity are comparing it to the libraries listed below
Sorting:
- PHP代码审计案例-1000PHP☆27Aug 20, 2024Updated last year
- 一款用Go实现的批量加载漏洞检测插件进行多线程扫描的框架。☆11Jan 20, 2024Updated 2 years ago
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆18Aug 25, 2025Updated 6 months ago
- 禅道认证绕过后台命令执行Getshell☆13Jan 8, 2025Updated last year
- 一款基于 AI 大模型的 WebShell 自动生成工具，支持自动迭代优化，集成河马查杀和阿里云伏魔平台检测。☆16Feb 5, 2026Updated 3 weeks ago
- java代码审计笔记☆19Jun 8, 2024Updated last year
- 基于load data逻辑漏洞的Mysql蜜罐☆23Jul 14, 2025Updated 7 months ago
- 一些jar包相关的漏洞☆24Sep 24, 2024Updated last year
- CVE-2024-21006 exp☆18Jul 29, 2024Updated last year
- 将fofa quake zoomeye hunter等空间测绘聚合的小工具☆23Aug 13, 2023Updated 2 years ago
- 新免杀方向 Mimikatz（猕猴桃） 免杀 360，火绒，电脑管家，WindowsDefinder，详细使用教程请参考博客：https://www.vpss.cc/381.html☆25Mar 4, 2024Updated last year
- 炭火，渗透测试全流程工具☆24Sep 1, 2025Updated 5 months ago
- 密探POC-漏洞验证工具0.2版☆28May 2, 2024Updated last year
- FOFA-X是一款方便处理FOFA URL的工具☆12Nov 11, 2024Updated last year
- A comprehensive repository for malware analysis and threat intelligence, including Cobalt Strike Beacon configurations, YARA rules, IOCs,…☆15Updated this week
- ☆40Nov 25, 2024Updated last year
- 攻击Java Web应用-[Java Web安全]☆12Dec 10, 2019Updated 6 years ago
- 一个多源漏洞情报聚合工具，能够从多个权威安全数据源爬取漏洞信息，去重后生成结构化报告。支持自定义时间范围查询、多格式输出和自动化定时任务。☆28Updated this week
- 通过网络资产线索（如：域名，IP地址，资产名称等），利用FOFA访问网络空间测绘数据☆11Apr 23, 2024Updated last year
- 递归寻找JS泄露的路径。Recursively search for the paths of JS Files.For pentest☆11Sep 30, 2024Updated last year
- IoTVulBench is an open-source benchmark dataset for IoT security research, containing firmware-related vulnerabilities and the correspond…☆18Dec 30, 2024Updated last year
- 实现轻量级RPC框架，网络通信框架Netty、注册中心（Zookeeper、Nacos）、Java基础（注解、反射、多线程、Future、SPI 、动态代理）、自定义传输协议、多种序列化（ProtoBuf / Kyro / Hessian）、Gzip压缩、轮询、随机、一致性…☆14May 7, 2022Updated 3 years ago
- go实现的shellcode免杀加载器，实测时可过火绒，360。当前效果请自行评判。☆44Sep 11, 2024Updated last year
- ☆41Apr 26, 2020Updated 5 years ago
- 零基础Java安全学习笔记☆56Dec 6, 2025Updated 2 months ago
- 基于单FOFA资产搜索引擎账号部署的多人协作查询B/S模式，后端部署后通过前端网页交互查询数据和导出数据☆12Aug 1, 2025Updated 6 months ago
- 蚁剑反制马☆13Aug 16, 2023Updated 2 years ago
- DLL Unhooking☆13Mar 26, 2021Updated 4 years ago
- study_summary☆10Aug 8, 2022Updated 3 years ago
- 一款基于James Forshaw的.NET Remoting反序列化工具升级版在TypeFilterLevel.Low模式无文件payload任意代码执行poc的开发心得☆48Jan 23, 2025Updated last year
- Anti-Rootkit Tool for Windows☆12Mar 24, 2025Updated 11 months ago
- 自研的linux_c2☆13Jun 28, 2023Updated 2 years ago
- y4er的ysoserial修改版，加入mysql不出网pipe文件生成☆24Jan 30, 2026Updated last month
- ☆51Aug 12, 2023Updated 2 years ago
- ☆13Dec 25, 2021Updated 4 years ago
- A small PoC using DInvoke, dynamically mapping a DLL and executing Win32 APIs for process injection.☆10Dec 16, 2021Updated 4 years ago
- ☆10Dec 24, 2022Updated 3 years ago
- java 内存马系列 实现（Servlets 、组件、Agent）☆10Mar 7, 2022Updated 3 years ago
- Hook for the PoC for exploiting CVE-2024-32002☆16May 19, 2024Updated last year