本项目是一个综合性的 Java 安全漏洞研究资源库，涵盖了多个知名组件和框架的安全漏洞研究、POC 代码和利用技术。项目内容包括但不限于： RCE (远程代码执行): 反序列化、表达式注入、模板注入等 SSRF (服务端请求伪造): XXE、URL 重定向等 信息泄露: 配置泄露、路径遍历等 认证绕过: 权限控制缺陷、会话管理问题等
☆19Mar 31, 2026Updated 6 months ago
Alternatives and similar repositories for Java-Security-Research-Notes
Users that are interested in Java-Security-Research-Notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Next-Gen Secret Scanner powered by Local AI (Ollama). Filters false positives by understanding code context.☆16Jul 12, 2026Updated 2 months ago
- Explore 'All Wordlist' repository for a vast collection of wordlists essential for web fuzzing and testing. From API endpoints to common …☆19Sep 27, 2024Updated 2 years ago
- 基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具☆21Jan 23, 2026Updated 8 months ago
- geoserver后台漏洞检测一键化工具☆38Jun 29, 2024Updated 2 years ago
- ☆22Aug 9, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 一款Google信息收集插件，包含域名，map，js等文件提取☆25Apr 5, 2025Updated last year
- HwToolsPro 工具编写POC 插件所需库☆35Oct 9, 2023Updated 3 years ago
- JSBerg is a fast and efficient URL scraper that extracts links, JavaScript files, CSS files, images, and inline URLs from a list of websi…☆24Mar 19, 2025Updated last year
- Stealthy Payload loader with Anti-EDR Capabilities☆133Apr 21, 2025Updated last year
- SubDroid 是一款针对网络安全领域的自动化子域名枚举与安全扫描工具。它专为渗透测试人员、安全研究人员及开发者设计,旨在帮助快速发现潜在的安全问题。SubDroid 集成了多个强大的安全工具,通过简洁的命令行界面提供了高效的子域名扫描、DNS 查询、端口扫描、活跃性检测…☆25Apr 22, 2025Updated last year
- "Everything About Hacker Tools" 是一站式信息平台，汇聚了关于黑客工具的全面指南 ，包括实用技巧、应用案例和安全防范建议，帮助技术爱好者深入了解网络安全技术，探索工具使用背后的逻辑与原理，同时强化对网络安全威胁的防范意识。无论是新手还是专业人士，…☆25Jan 25, 2026Updated 8 months ago
- 一款内网横向渗透辅助工具☆28Mar 26, 2022Updated 4 years ago
- 海康威视iSecure后渗透☆31Aug 13, 2024Updated 2 years ago
- FastJsonAutoTypeBypass☆16Apr 14, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一个神一般的linux全架构全漏洞提权程序☆44May 5, 2025Updated last year
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆84Sep 20, 2026Updated 2 weeks ago
- The code in this repository which function is to extract the shellcode from the maldoc.☆10Jul 17, 2023Updated 3 years ago
- ProxyCat 的 Golang 重构版本☆15Aug 29, 2024Updated 2 years ago
- ApolloLnk 是一款功能强大的 Windows LNK 快捷方式生成工具，支持参数隐藏、图标伪造、文件打包等多种高级功能，适用于安全研究、渗透测试等场景。☆43Jan 12, 2026Updated 8 months ago
- 一款支持检测host头攻击的burp suite插件☆54Feb 21, 2024Updated 2 years ago
- host碰撞工具☆13May 22, 2023Updated 3 years ago
- wscan自用指纹库☆12May 24, 2024Updated 2 years ago
- A tool to generate wordlists based on case☆30Nov 24, 2025Updated 10 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 流量统计分析系统: 模拟真实日志，消费解析日志，得到一些统计数据，基于数据实现web的可视化展示☆11Aug 17, 2021Updated 5 years ago
- sqlmap被动代理小工具☆19Aug 20, 2024Updated 2 years ago
- 一个红队知识仓库☆17Jun 13, 2022Updated 4 years ago
- IDA Plugin exports all pseudocode at once for easy search and analysis☆38Apr 14, 2026Updated 5 months ago
- BeforeDawn 漏洞全生命周期管理平台 docker部署项目☆36Aug 11, 2026Updated last month
- A port forwarding tool works like ssh tunneling, but Zero Config for client.☆27Dec 6, 2024Updated last year
- Python分离免杀+混淆Bypass 360&火绒☆38Oct 13, 2022Updated 3 years ago
- Jasmin Ransomware 是一款用于模拟真实勒索软件攻击的高级红队工具（WannaCry Clone）。Jasmin 帮助安全研究人员克服外部攻击的风险。☆16Nov 11, 2022Updated 3 years ago
- 通过分离的方式免杀火绒☆12Dec 15, 2023Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一款基于javafx的自有IP地址查询工具(适用于重保、蓝队、攻防演习等场景)☆39Aug 8, 2024Updated 2 years ago
- Redis primary/secondary replication RCE☆45Apr 18, 2022Updated 4 years ago
- 一款功能强大的Docker Registry 5000端口未授权浏览、下载和安全测试工具，集成了镜像管理、认证爆破、敏感信息搜索等多项实用功能。☆36May 8, 2026Updated 5 months ago
- 一款冰蝎内存马清除工具；冰蝎内存马卸载工具 ；内存马的查杀功能有待实现。☆12Aug 20, 2023Updated 3 years ago
- 一种安全加密数据的方式，数据可以实现自校验，防止数据损坏和篡改（A way to securely encrypt data, the data can be self-verified to prevent data damage and tampering）☆64Dec 16, 2023Updated 2 years ago
- 适用于目标命令执行不出网、无回显等场景☆12Oct 8, 2022Updated 4 years ago
- Out-of-the-box CobaltStrike Beacon source code use C++☆35Aug 3, 2025Updated last year