本项目是一个综合性的 Java 安全漏洞研究资源库，涵盖了多个知名组件和框架的安全漏洞研究、POC 代码和利用技术。项目内容包括但不限于： RCE (远程代码执行): 反序列化、表达式注入、模板注入等 SSRF (服务端请求伪造): XXE、URL 重定向等 信息泄露: 配置泄露、路径遍历等 认证绕过: 权限控制缺陷、会话管理问题等
☆19Mar 31, 2026Updated 4 months ago
Alternatives and similar repositories for Java-Security-Research-Notes
Users that are interested in Java-Security-Research-Notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Next-Gen Secret Scanner powered by Local AI (Ollama). Filters false positives by understanding code context.☆17Jul 12, 2026Updated 3 weeks ago
- Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Hua…☆68Updated this week
- 基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具☆20Jan 23, 2026Updated 6 months ago
- geoserver后台漏洞检测一键化工具☆38Jun 29, 2024Updated 2 years ago
- Awesome AI Tools for Game Development: A curated collection of the best AI tools, libraries, and resources to enhance game development wo…☆25Feb 3, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 企业级主机与容器安全管理平台。覆盖安全基线、资产管理、漏洞扫描、病毒查杀、文件完整性监控、运行时检测、容器安全、威胁情报与告警响应，面向安全运营团队提供统一管控视图。☆21Updated this week
- A super-fast proxy server port scanner一个超级快的端口扫描器☆24Aug 31, 2025Updated 11 months ago
- ☆22Aug 9, 2025Updated last year
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆85Updated this week
- 一款Google信息收集插件，包含域名，map，js等文件提取☆24Apr 5, 2025Updated last year
- 一款支持检测host头攻击的burp suite插件☆54Feb 21, 2024Updated 2 years ago
- HwToolsPro 工具编写POC 插件所需库☆35Oct 9, 2023Updated 2 years ago
- JSBerg is a fast and efficient URL scraper that extracts links, JavaScript files, CSS files, images, and inline URLs from a list of websi…☆24Mar 19, 2025Updated last year
- BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the …☆22Apr 27, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Stealthy Payload loader with Anti-EDR Capabilities☆135Apr 21, 2025Updated last year
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆18Jan 7, 2026Updated 7 months ago
- SubDroid 是一款针对网络安全领域的自动化子域名枚举与安全扫描工具。它专为渗透测试人员、安全研究人员及开发者设计,旨在帮助快速发现潜在的安全问题。SubDroid 集成了多个强大的安全工具,通过简洁的命令行界面提供了高效的子域名扫描、DNS 查询、端口扫描、活跃性检测…☆26Apr 22, 2025Updated last year
- Burp Suite Configuration Tweak☆13Mar 15, 2024Updated 2 years ago
- List of Public Bug Bounty and Responsible Disclosure Programs☆22Dec 11, 2025Updated 7 months ago
- WebSocket shell☆13Nov 29, 2020Updated 5 years ago
- "Everything About Hacker Tools" 是一站式信息平台，汇聚了关于黑客工具的全面指南，包括实用技巧、应用案例和安全防范建议，帮助技术爱好者深入了解网络安全技术，探索工具使用背后的逻辑与原理，同时强化对网络安全威胁的防范意识。无论是新手还是专业人士，…☆25Jan 25, 2026Updated 6 months ago
- 一款内网横向渗透辅助工具☆28Mar 26, 2022Updated 4 years ago
- 海康威视iSecure后渗透☆31Aug 13, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An API wrapper for @convertio (convertio.co) written in Python.☆12Jun 30, 2025Updated last year
- FastJsonAutoTypeBypass☆16Apr 14, 2021Updated 5 years ago
- 一个神一般的linux全架构全漏洞提权程序☆46May 5, 2025Updated last year
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated 3 weeks ago
- Proof of concept python script for regreSSHion exploit.☆12Oct 19, 2024Updated last year
- 人工流量分析辅助脚本☆12Jul 4, 2019Updated 7 years ago
- The code in this repository which function is to extract the shellcode from the maldoc.☆10Jul 17, 2023Updated 3 years ago
- ProxyCat 的 Golang 重构版本☆15Aug 29, 2024Updated last year
- ApolloLnk 是一款功能强大的 Windows LNK 快捷方式生成工具，支持参数隐藏、图标伪造、文件打包等多种高级功能，适用于安全研究、渗透测试等场景。☆43Jan 12, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- JeecgBoot Go版本综合漏洞检测工具☆103Feb 24, 2026Updated 5 months ago
- host碰撞工具☆13May 22, 2023Updated 3 years ago
- wscan自用指纹库☆12May 24, 2024Updated 2 years ago
- A tool to generate wordlists based on case☆30Nov 24, 2025Updated 8 months ago
- 流量统计分析系统: 模拟真实日志，消费解析日志，得到一些统计数据，基于数据实现web的可视化展示☆11Aug 17, 2021Updated 4 years ago
- sqlmap被动代理小工具☆19Aug 20, 2024Updated last year
- 一个红队知识仓库☆16Jun 13, 2022Updated 4 years ago