此处是【炼石计划@Java代码审计】知识星球课程目录整理处。 【炼石计划@Java代码审计】专注Java代码审计入门与提升，我将学习路线分成了六个阶段也对应着六大套课程分享。 课程内容不深入开发细节，只关注Java代码审计应学应会的内容。
☆32Nov 15, 2022Updated 3 years ago
Alternatives and similar repositories for SmeltingStone
Users that are interested in SmeltingStone are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike二次开发笔记，记录功能和思路☆16Jul 9, 2022Updated 3 years ago
- 应急响应工具&文档☆16May 27, 2024Updated last year
- 批量获取攻防资产访问截图☆33Apr 17, 2025Updated 11 months ago
- 一款快速查询收集小程序域名工具☆18Dec 30, 2021Updated 4 years ago
- CVE-2025-31324, SAP Exploit☆25Apr 28, 2025Updated 10 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆12Feb 12, 2020Updated 6 years ago
- go语言免杀shellcode☆19Dec 31, 2021Updated 4 years ago
- 语雀敏感信息泄露搜索工具☆13Jan 20, 2023Updated 3 years ago
- 在学习Java反序列化漏洞的过程中，用来理解Java RMI程序的执行流程，演示如何攻击Java RMI程序的几个示例。☆11May 6, 2020Updated 5 years ago
- 常用的frida脚本☆16Mar 7, 2023Updated 3 years ago
- burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977☆154Jan 23, 2023Updated 3 years ago
- 利用云函数实现端口扫描☆14Nov 17, 2025Updated 4 months ago
- ☆17Jul 18, 2022Updated 3 years ago
- java代码审计笔记☆21Jun 8, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 通信流量加密webshell管理客户端☆16Sep 7, 2025Updated 6 months ago
- CVE-2024-21006 exp☆17Jul 29, 2024Updated last year
- 一些总结出来的gadget的flow，后续合适和加入新的flow☆68Dec 6, 2025Updated 3 months ago
- Java安全学习历程☆42Jul 7, 2023Updated 2 years ago
- XxlJob<=2.1.2配置不当情况下反序列化RCE☆121Nov 2, 2020Updated 5 years ago
- flash钓鱼 flash水坑攻击最新版源码☆65Feb 10, 2023Updated 3 years ago
- 「💥」CVE-2022-26134 - Confluence Pre-Auth RCE☆14Jun 19, 2022Updated 3 years ago
- This repository houses diverse files and challenges centered around Just Mobile Security. With practical exercises and resources aimed at…☆13Apr 15, 2024Updated last year
- 爬取全国的手机号码/Get all the Chinese phone number from web☆19Nov 1, 2019Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Cobalt Strike 上线提醒，飞书、钉钉、企业微信机械人，cs上线提醒。☆59May 30, 2022Updated 3 years ago
- ☆197Sep 26, 2024Updated last year
- CVE-2025-55182-bypass-waf☆31Jan 8, 2026Updated 2 months ago
- Check VM/SandBox☆17Mar 23, 2023Updated 3 years ago
- Django QuerySet.annotate(), aggregate(), extra() SQL 注入☆25May 31, 2022Updated 3 years ago
- 该资源为作者CTF学习Web类型题目解题思路，希望对您有所帮助~☆12Jun 13, 2020Updated 5 years ago
- Laravel Debug mode RCE漏洞（CVE-2021-3129）poc / exp☆13Mar 4, 2023Updated 3 years ago
- 内网自动化快速打点工具｜资产探测｜漏洞扫描｜服务扫描｜弱口令爆破☆456Nov 29, 2023Updated 2 years ago
- 检测查杀java内存马☆127Dec 5, 2023Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Personal notes for Java Deserialization Vulnerability. 对应Java反序列化漏洞利用链集合详解、个人笔记☆18Jan 10, 2022Updated 4 years ago
- go免杀项目☆27Nov 10, 2022Updated 3 years ago
- Hello, Attack Surface Scan, BurpSuite完全被动扫描插件，不主动发送任何请求，适合挂机使用。☆24Jul 10, 2022Updated 3 years ago
- 红队|域渗透重要漏洞汇总(持续更新)☆290Dec 23, 2022Updated 3 years ago
- log4j tomcat web漏洞环境☆11Dec 10, 2021Updated 4 years ago
- Python3写的一个大规模查询权重查询，目前支持单次和大规模站点权重查询和一些企业信息。可以帮助提交漏洞者的主要快速知道是否有无权重以及网站信息来快速提交漏洞。☆17Sep 14, 2021Updated 4 years ago
- CVE-2022-23131漏洞利用工具开箱即用。☆11Apr 2, 2022Updated 3 years ago