本项目是一个综合性的 Java 安全漏洞研究资源库，涵盖了多个知名组件和框架的安全漏洞研究、POC 代码和利用技术。项目内容包括但不限于： RCE (远程代码执行): 反序列化、表达式注入、模板注入等 SSRF (服务端请求伪造): XXE、URL 重定向等 信息泄露: 配置泄露、路径遍历等 认证绕过: 权限控制缺陷、会话管理问题等
☆19Mar 31, 2026Updated 6 months ago
Alternatives and similar repositories for Java-Security-Research-Notes
Users that are interested in Java-Security-Research-Notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Next-Gen Secret Scanner powered by Local AI (Ollama). Filters false positives by understanding code context.☆16Jul 12, 2026Updated 3 months ago
- 基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具☆21Jan 23, 2026Updated 9 months ago
- geoserver后台漏洞检测一键化工具☆38Jun 29, 2024Updated 2 years ago
- ☆22Aug 9, 2025Updated last year
- A super-fast proxy server port scanner一个超级快的端口扫描器☆26Aug 31, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 零零信安api信息系统查询脚本☆11Sep 22, 2023Updated 3 years ago
- Smart contract security researcher — profile README☆19Sep 18, 2026Updated last month
- JSBerg is a fast and efficient URL scraper that extracts links, JavaScript files, CSS files, images, and inline URLs from a list of websi…☆24Mar 19, 2025Updated last year
- SubDroid 是一款针对网络安全领域的自动化子域名枚举与安全扫描工具。它专为渗透测试人员、安全研究人员及开发者设计,旨在帮助快速发现潜在的安全问题。SubDroid 集成了多个强大的安全工具,通过简洁的命令行界面提供了高效的子域名扫描、DNS 查询、端口扫描、活跃性检测…☆25Apr 22, 2025Updated last year
- HwToolsPro 工具编写POC 插件所需库☆35Oct 9, 2023Updated 3 years ago
- 一款Google信息收集插件，包含域名，map，js等文件提取☆25Apr 5, 2025Updated last year
- CVE-2026-31431 容器逃逸☆27May 2, 2026Updated 5 months ago
- "Everything About Hacker Tools" 是一站式信息平台，汇聚了关于黑客工具的全面指南，包括实用技巧、应用案例和安全防范建议，帮助技术爱好者深入了解网络安全技术，探索工具使用背后的逻辑与原理，同时强化对网络安全威胁的防范意识。无论是新手还是专业人士，…☆25Jan 25, 2026Updated 9 months ago
- Rust写的漏洞检测框架,起初是知道创宇开源的pocsuite3是基于python开发,不想在使用时安装python。所以想使用rust尝试重写，也当稳固一下rust这门语言吧☆13Feb 9, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Stealthy Payload loader with Anti-EDR Capabilities☆134Apr 21, 2025Updated last year
- 一款内网横向渗透辅助工具☆28Mar 26, 2022Updated 4 years ago
- FastJsonAutoTypeBypass☆16Apr 14, 2021Updated 5 years ago
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆84Oct 22, 2026Updated last week
- 海康威视iSecure后渗透☆32Aug 13, 2024Updated 2 years ago
- Web Fingerprint All-in-One ｜ web指纹识别 All-in-One☆13Jun 15, 2026Updated 4 months ago
- 人工流量分析辅助脚本☆12Jul 4, 2019Updated 7 years ago
- Samsung Book x30 np550xcj-kf1br EFI Opencore MacOS Ventura☆10Mar 26, 2023Updated 3 years ago
- ApolloLnk 是一款功能强大的 Windows LNK 快捷方式生成工具，支持参数隐藏、图标伪造、文件打包等多种高级功能，适用于安全研究、渗透测试等场景。☆45Jan 12, 2026Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Jasmin Ransomware 是一款用于模拟真实勒索软件攻击的高级红队工具（WannaCry Clone）。Jasmin 帮助安全研究人员克服外部攻击的风险。☆15Nov 11, 2022Updated 3 years ago
- ProxyCat 的 Golang 重构版本☆15Aug 29, 2024Updated 2 years ago
- Trying to reproduce CVE-2021-43908☆10Aug 14, 2022Updated 4 years ago
- Automated workflows in disposable macOS VMs. 📦☆16Updated this week
- POC Utilizing the new SleepMask-VS kit to utilize RC4 encryption.☆12Mar 4, 2025Updated last year
- 利用阿里云oss对象存储，来转发http流量实现（cs）Cobalt Strike、msf 上线等 这之间利用阿里云的相关域名进行通信。☆171Apr 19, 2026Updated 6 months ago
- The code in this repository which function is to extract the shellcode from the maldoc.☆10Jul 17, 2023Updated 3 years ago
- 🎀 CLI to create Android apps on Termux / Linux☆13Aug 28, 2024Updated 2 years ago
- 基于HoneyPy可视化蜜罐，visualization Honeypot based on HoneyPy☆16Mar 23, 2017Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A tool to generate wordlists based on case☆30Nov 24, 2025Updated 11 months ago
- 流量统计分析系统: 模拟真实日志，消费解析日志，得到一些统计数据，基于数据实现web的可视化展示☆11Aug 17, 2021Updated 5 years ago
- Python分离免杀+混淆Bypass 360&火绒☆37Oct 13, 2022Updated 4 years ago
- wscan自用指纹库☆12May 24, 2024Updated 2 years ago
- 通过分离的方式免杀火绒☆12Dec 15, 2023Updated 2 years ago
- 一款基于javafx的自有IP地址查询工具(适用于重保、蓝队、攻防演习等场景)☆39Aug 8, 2024Updated 2 years ago
- CVE-2023-45866 - BluetoothDucky implementation (Using DuckyScript)☆16Jan 15, 2024Updated 2 years ago