此处是【炼石计划@Java代码审计】知识星球课程目录整理处。 【炼石计划@Java代码审计】专注Java代码审计入门与提升，我将学习路线分成了六个阶段也对应着六大套课程分享。 课程内容不深入开发细节，只关注Java代码审计应学应会的内容。
☆32Nov 15, 2022Updated 3 years ago
Alternatives and similar repositories for SmeltingStone
Users that are interested in SmeltingStone are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Java代码审计、代码安全☆10Jun 18, 2022Updated 4 years ago
- Cobalt Strike二次开发笔记，记录功能和思路☆14Jul 9, 2022Updated 4 years ago
- 批量获取攻防资产访问截图☆33Apr 17, 2025Updated last year
- Personal notes for Java Deserialization Vulnerability. 对应Java反序列化漏洞利用链集合详解、个人笔记☆18Jan 10, 2022Updated 4 years ago
- 应急响应工具&文档☆18May 27, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 通信流量加密webshell管理客户端☆14Sep 7, 2025Updated last year
- 一款快速查询收集小程序域名工具☆18Dec 30, 2021Updated 4 years ago
- This is a windows maching login page designed using HTML, CSS and JS. This can be used for red teaming or cybersecurity awareness related…☆18Mar 25, 2022Updated 4 years ago
- go语言免杀shellcode☆17Dec 31, 2021Updated 4 years ago
- ☆12Feb 12, 2020Updated 6 years ago
- 在学习Java反序列化漏洞的过程中，用来理解Java RMI程序的执行流程，演示如何攻击Java RMI程序的几个示例。☆11May 6, 2020Updated 6 years ago
- 语雀敏感信息泄露搜索工具☆13Jan 20, 2023Updated 3 years ago
- 加密app渗透测试包，用于brida和frida练习hook逆向技术的安卓apk源码。尝试暴破出加密密码并进行登录即可通关。自动加解密。Brida+burpsuite联动（自动加解密APP请求参数）演示视频在我的Bilibili。☆22Mar 27, 2025Updated last year
- XxlJob<=2.1.2配置不当情况下反序列化RCE☆129Nov 2, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977☆153Jan 23, 2023Updated 3 years ago
- 一键报文解码，HVV，蓝队防守利器☆23Sep 27, 2024Updated 2 years ago
- 利用云函数实现端口扫描☆15Nov 17, 2025Updated 11 months ago
- CVE-2024-21006 exp☆17Jul 29, 2024Updated 2 years ago
- 常用的frida脚本☆16Mar 7, 2023Updated 3 years ago
- 一款基于fofa api语句的资产收集工具，用于红队快速收集顶级域名或者ip相关关联的资产☆27Jul 13, 2023Updated 3 years ago
- 结合反射调用、动态编译、BCEL、defineClass0，ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具☆19Dec 16, 2021Updated 4 years ago
- ☆16Jul 18, 2022Updated 4 years ago
- CVE-2025-31324, SAP Exploit☆25Apr 28, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Java安全学习历程☆41Jul 7, 2023Updated 3 years ago
- 爬取全国的手机号码/Get all the Chinese phone number from web☆19Nov 1, 2019Updated 7 years ago
- 检测查杀java内存马☆129Dec 5, 2023Updated 2 years ago
- Cobalt Strike 上线提醒，飞书、钉钉、企业微信机械人，cs上线提醒。☆56May 30, 2022Updated 4 years ago
- This repository houses diverse files and challenges centered around Just Mobile Security. With practical exercises and resources aimed at…☆14Apr 15, 2024Updated 2 years ago
- 一款支持高度自定义的 Java 内存马生成工具☆11Jun 9, 2023Updated 3 years ago
- 一款终端扫描工具☆29Jul 19, 2022Updated 4 years ago
- go免杀项目☆27Nov 10, 2022Updated 3 years ago
- Laravel Debug mode RCE漏洞（CVE-2021-3129）poc / exp☆13Mar 4, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆196Sep 26, 2024Updated 2 years ago
- Getting started with java code auditing 代码审计入门的小项目☆924Feb 22, 2023Updated 3 years ago
- 一些总结出来的gadget的flow，后续合适和加入新的flow☆70Dec 6, 2025Updated 10 months ago
- flash钓鱼 flash水坑攻击最新版源码☆65Feb 10, 2023Updated 3 years ago
- java 代码审计学习靶场☆121Jan 11, 2024Updated 2 years ago
- Memshell-攻防内存马研究☆975Apr 13, 2025Updated last year
- 通过censys搜索引擎中的ssl证书信息进行资产探测及子域名收集☆11Apr 15, 2019Updated 7 years ago