本项目是一个综合性的 Java 安全漏洞研究资源库，涵盖了多个知名组件和框架的安全漏洞研究、POC 代码和利用技术。项目内容包括但不限于： RCE (远程代码执行): 反序列化、表达式注入、模板注入等 SSRF (服务端请求伪造): XXE、URL 重定向等 信息泄露: 配置泄露、路径遍历等 认证绕过: 权限控制缺陷、会话管理问题等
☆19Mar 31, 2026Updated 3 months ago
Alternatives and similar repositories for Java-Security-Research-Notes
Users that are interested in Java-Security-Research-Notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Next-Gen Secret Scanner powered by Local AI (Ollama). Filters false positives by understanding code context.☆17Jul 12, 2026Updated last week
- 云安全渗透测试框架 - 支持 AWS、Azure、GCP、阿里云、腾讯云、华为云的综合渗透测试工具和指南☆20Mar 19, 2026Updated 4 months ago
- A super-fast proxy server port scanner一个超级快的端口扫描器☆24Aug 31, 2025Updated 10 months ago
- 基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具☆20Jan 23, 2026Updated 5 months ago
- 企业级主机与容器安全管理平台。覆盖安全基线、资产管理、漏洞扫描、病毒查杀、文件完整性监控、运行时检测、容器安全、威胁情报与告警响应，面向安全运营团队提供统一管控视图。☆20Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Awesome AI Tools for Game Development: A curated collection of the best AI tools, libraries, and resources to enhance game development wo…☆26Feb 3, 2026Updated 5 months ago
- ☆22Aug 9, 2025Updated 11 months ago
- GYscan是一款基于Go语言开发的现代化综合渗 透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆82Jul 6, 2026Updated 2 weeks ago
- 一款Google信息收集插件，包含域名，map，js等文件提取☆24Apr 5, 2025Updated last year
- 一款支持检测host头攻击的burp suite插件☆54Feb 21, 2024Updated 2 years ago
- HwToolsPro 工具编写POC 插件所需库☆35Oct 9, 2023Updated 2 years ago
- JSBerg is a fast and efficient URL scraper that extracts links, JavaScript files, CSS files, images, and inline URLs from a list of websi…☆24Mar 19, 2025Updated last year
- Stealthy Payload loader with Anti-EDR Capabilities☆135Apr 21, 2025Updated last year
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆17Jan 7, 2026Updated 6 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- SubDroid 是一款针对网络安全领域的自动化子域名枚举与安全扫描工具。它专为渗透测试人员、安全研究人员及开发者设计,旨在帮助快速发现潜在的安全问题。SubDroid 集成了多个强大的安全工具,通过简洁的命令行界面提供了高效的子域名扫描、DNS 查询、端口扫描、活跃性检测…☆26Apr 22, 2025Updated last year
- Burp Suite Configuration Tweak☆13Mar 15, 2024Updated 2 years ago
- List of Public Bug Bounty and Responsible Disclosure Programs☆18Dec 11, 2025Updated 7 months ago
- CDN SNI Scanner PLUS for V2Ray+xray && Xray Config(Node)Parser && ٍEditor☆17Jun 9, 2026Updated last month
- "Everything About Hacker Tools" 是一站式信息平台，汇聚了关于黑客工具的全面指南，包括实用技巧、应用案例和安全防范建议，帮助技术爱好者深入了解网络安全技术，探索工具使用背后的逻辑与原理，同时强化对网络安全威胁的防范意识。无论是新手还是专业人士，…☆25Jan 25, 2026Updated 5 months ago
- 海康威视iSecure后渗透☆31Aug 13, 2024Updated last year
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated last week
- ProxyCat 的 Golang 重构版本☆15Aug 29, 2024Updated last year
- FastJsonAutoTypeBypass☆16Apr 14, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Proof of concept python script for regreSSHion exploit.☆12Oct 19, 2024Updated last year
- 一个神一般的linux全架构全漏洞提权程序☆46May 5, 2025Updated last year
- 0xJS is an AI-powered JavaScript Security Tool☆64Apr 16, 2026Updated 3 months ago
- ApolloLnk 是一款功能强大的 Windows LNK 快捷方式生成工具，支持参数隐藏、图标伪造、文件打包等多种高级功能，适用于安全研究、渗透测试等场景。☆43Jan 12, 2026Updated 6 months ago
- JeecgBoot Go版本综合漏洞检测工具☆103Feb 24, 2026Updated 4 months ago
- host碰撞工具☆13May 22, 2023Updated 3 years ago
- wscan自用指纹库☆12May 24, 2024Updated 2 years ago
- 流量统计分析系统: 模拟真实日志，消费解析日志，得到一些统计数据，基于数据实现web的可视化展示☆11Aug 17, 2021Updated 4 years ago
- sqlmap被动代理小工具☆19Aug 20, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一个红队知识仓库☆16Jun 13, 2022Updated 4 years ago
- Calculate allowed interactions in QED☆10Nov 2, 2022Updated 3 years ago
- A tool to generate wordlists based on case☆30Nov 24, 2025Updated 7 months ago
- IDA Plugin exports all pseudocode at once for easy search and analysis☆36Apr 14, 2026Updated 3 months ago
- BeforeDawn 漏洞全生命周期管理平台 docker部署项目☆34Jun 13, 2026Updated last month
- NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间☆22Mar 27, 2026Updated 3 months ago
- Python分离免杀+混淆Bypass 360&火绒☆39Oct 13, 2022Updated 3 years ago