一些jar包相关的漏洞
☆28May 26, 2026Updated 2 months ago
Alternatives and similar repositories for jarVuln
Users that are interested in jarVuln are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- y4er的ysoserial修改版，加入mysql不出网pipe文件生成☆29Jul 13, 2026Updated last month
- GadgetExplorer is a .NET command-line tool for finding potential deserialization gadget chains in managed applications. It scans one or m…☆16May 22, 2026Updated 2 months ago
- 若依4.8.0后台RCE☆27May 21, 2025Updated last year
- ASP & ASP.NET WebShell Bypass☆72Jan 4, 2026Updated 7 months ago
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆18Jan 7, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 某软最新公开gadgegt,新加入不出网利用。☆90Sep 6, 2024Updated last year
- 检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare☆81Oct 23, 2023Updated 2 years ago
- Java代码审计学习笔记☆13Dec 20, 2024Updated last year
- 一个 CLASS 文件混淆工具，支持方法字段参数名引用分析和重命名混淆，支持字符串提取/AES加密运行时解密/ 整型异或混淆/垃圾代码花指令混淆/错误注解崩溃/特殊字符迷惑用户/反编译器对抗/方法和字段的隐藏等，配置简单，容易上手☆329Jan 26, 2026Updated 6 months ago
- 利用代理驱动绕过JDBC Attack检测☆145Jun 15, 2025Updated last year
- Java 代码审计 idea 插件☆25Mar 8, 2025Updated last year
- 针对finereportv10反序列化接口/webroot/decision/remote/design/channel进行无回显检测并提供Godzilla memshell注入功能（部分环境缺少依赖无法成功）☆23Oct 17, 2023Updated 2 years ago
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆95Jun 15, 2026Updated 2 months ago
- CVE-2026-31431 容器逃逸☆25May 2, 2026Updated 3 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆132Oct 12, 2024Updated last year
- Java bytecode line number restoration tool☆144Aug 31, 2025Updated 11 months ago
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆28Sep 28, 2025Updated 10 months ago
- 分享ABC_123自己改造的ysoserial工具，java反序列化漏洞利用，生成的java反序列化利用链支持jdk1.5版本的老旧系统的利用。☆59Mar 16, 2025Updated last year
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘 》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆594Feb 7, 2026Updated 6 months ago
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆237Jun 5, 2026Updated 2 months ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆577Apr 3, 2026Updated 4 months ago
- xxl-job内存马☆233Jan 26, 2025Updated last year
- 一款根据pom.xml获取引用的第三方组件的版本号并识别组件漏洞的工具☆23May 17, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 当前仅限于8.4和8.5☆17May 4, 2026Updated 3 months ago
- java-swing-gui-stater | Java Swing GUI Maven 项目模板 | 简单的教程☆61Oct 30, 2024Updated last year
- 一个专注于 Java Web 特性、配置和 Trick 的安全谜题集合☆130Dec 24, 2025Updated 7 months ago
- 可能是windows最小的wget (862字节)☆70Dec 13, 2024Updated last year
- javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手☆278Jun 18, 2024Updated 2 years ago
- 在xxe中使用smb外带多行内容☆112Nov 9, 2025Updated 9 months ago
- No One（无名）：Next Generation Polyglot Website Manager☆87May 30, 2026Updated 2 months ago
- SpringBlade框架JWT认证的漏洞检测工具☆11Apr 22, 2025Updated last year
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆126Jul 30, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Java JDK 8-18 CodeQL databases☆17Jun 2, 2024Updated 2 years ago
- 7bits安全团队-《Java安全-记一次实战使用memoryshell》代码样例☆19Nov 13, 2022Updated 3 years ago
- 一个基于 Vineflower 引擎的多线程 Java 批量反编译工具，支持快速处理大量的 class 文件和 JAR 文件。☆60Apr 28, 2025Updated last year
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆52Sep 10, 2023Updated 2 years ago
- EMQX Dashboard Malicious Plugin leading to RCE☆47Jun 16, 2025Updated last year
- 通过RPC创建计划任务☆33May 18, 2025Updated last year
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,575Aug 8, 2026Updated last week