本项目是一个综合性的 Java 安全漏洞研究资源库，涵盖了多个知名组件和框架的安全漏洞研究、POC 代码和利用技术。项目内容包括但不限于： RCE (远程代码执行): 反序列化、表达式注入、模板注入等 SSRF (服务端请求伪造): XXE、URL 重定向等 信息泄露: 配置泄露、路径遍历等 认证绕过: 权限控制缺陷、会话管理问题等
☆19Mar 31, 2026Updated 4 months ago
Alternatives and similar repositories for Java-Security-Research-Notes
Users that are interested in Java-Security-Research-Notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Next-Gen Secret Scanner powered by Local AI (Ollama). Filters false positives by understanding code context.☆16Jul 12, 2026Updated last month
- Explore 'All Wordlist' repository for a vast collection of wordlists essential for web fuzzing and testing. From API endpoints to common …☆17Sep 27, 2024Updated last year
- 基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具☆20Jan 23, 2026Updated 7 months ago
- 企业级主机与容器安全管理平台。覆盖安全基线、资产管理、漏洞扫描、病毒查杀、文件完整性监控、运行时检测、容器安全、威胁情报与告警响应，面向安全运营团队提供统一管控视图。☆21Aug 4, 2026Updated 3 weeks ago
- A super-fast proxy server port scanner一个超级快的端口扫描器☆24Aug 31, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆22Aug 9, 2025Updated last year
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆86Aug 6, 2026Updated 3 weeks ago
- 一款Google信息收集插件，包含域名，map，js等文件提取☆24Apr 5, 2025Updated last year
- JSBerg is a fast and efficient URL scraper that extracts links, JavaScript files, CSS files, images, and inline URLs from a list of websi…☆24Mar 19, 2025Updated last year
- BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the …☆22Apr 27, 2026Updated 4 months ago
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆18Updated this week
- Stealthy Payload loader with Anti-EDR Capabilities☆135Apr 21, 2025Updated last year
- SubDroid 是一款针对网络安全领域的自动化子域名枚举与安全扫描工具。它专为渗透测试人员、安全研究人员及开发者设计,旨在帮助快速发现潜在的安全问题。SubDroid 集成了多个强大的安全工具,通过简洁的命令行界面提供了高效的子域名扫描、DNS 查询、端口扫描、活跃性检测…☆25Apr 22, 2025Updated last year
- CDN SNI Scanner PLUS for V2Ray+xray && Xray Config(Node)Parser && ٍEditor☆17Jun 9, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- "Everything About Hacker Tools" 是一站式信息平台，汇聚了关于黑客工具的全面指南，包括实用技巧、应用案例和安全防范建议，帮助技术爱好者深入了解网络安全技术，探索工具使用背后的逻辑与原理，同时强化对网络安全威胁的防范意识。无论是新手还是专业人士，…☆25Jan 25, 2026Updated 7 months ago
- 一款内网横向渗透辅助工具☆28Mar 26, 2022Updated 4 years ago
- 海康威视iSecure后渗透☆31Aug 13, 2024Updated 2 years ago
- FastJsonAutoTypeBypass☆16Apr 14, 2021Updated 5 years ago
- 一个神一般的linux全架构全漏洞提权程序☆46May 5, 2025Updated last year
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated last month
- Proof of concept python script for regreSSHion exploit.☆12Oct 19, 2024Updated last year
- Self-deployed Straight-forward hacking lab machine which designed for new comer who want to learn Penetration Testing field that running …☆16May 31, 2026Updated 2 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆67Apr 16, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 人工流量分析辅助脚本☆12Jul 4, 2019Updated 7 years ago
- The code in this repository which function is to extract the shellcode from the maldoc.☆10Jul 17, 2023Updated 3 years ago
- ProxyCat 的 Golang 重构版本☆15Aug 29, 2024Updated 2 years ago
- ApolloLnk 是一款功能强大的 Windows LNK 快捷方式生成工具，支持参数隐藏、图标伪造、文件打包等多种高级功能，适用于安全研究、渗透测试等场景。☆43Jan 12, 2026Updated 7 months ago
- Bug Bounty Methodology☆335Aug 4, 2026Updated 3 weeks ago
- JeecgBoot Go版本综合漏洞检测工具☆104Feb 24, 2026Updated 6 months ago
- A Python script to authenticate and test access to Google Cloud Platform (GCP) resources.☆19Jan 31, 2024Updated 2 years ago
- host碰撞工具☆13May 22, 2023Updated 3 years ago
- wscan自用指纹库☆12May 24, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A tool to generate wordlists based on case☆30Nov 24, 2025Updated 9 months ago
- 流量统计分析系统: 模拟真实日志，消费解 析日志，得到一些统计数据，基于数据实现web的可视化展示☆11Aug 17, 2021Updated 5 years ago
- sqlmap被动代理小工具☆19Aug 20, 2024Updated 2 years ago
- 一个红队知识仓库☆16Jun 13, 2022Updated 4 years ago
- IDA Plugin exports all pseudocode at once for easy search and analysis☆38Apr 14, 2026Updated 4 months ago
- BeforeDawn 漏洞全生命周期管理平台 docker部署项目☆35Aug 11, 2026Updated 2 weeks ago
- Calculate allowed interactions in QED☆10Nov 2, 2022Updated 3 years ago