Alternatives and similar repositories for Web-Security

Users that are interested in Web-Security are comparing it to the libraries listed below

• waderwu / javaDeserializeLabs
  javaDeserializeLabs
  ☆69Updated 2 years ago
• Drun1baby / CTF-Repo-2023
  2023 各大 CTF 的比赛附件
  ☆49Updated 2 years ago
• Firebasky / ctf-Challenge
  是一些比赛中的好题，加上自己出的一些。。。
  ☆43Updated 2 years ago
• luelueking / Deserial_Sink_With_JDBC
  Some ReadObject Sink With JDBC
  ☆216Updated last year
• ax1sX / RouteCheck-Alpha
  A Java Route Collection Tool
  ☆97Updated 10 months ago
• yuanhaiGreg / Fuzz-Dict
  一些常见字典
  ☆170Updated 3 years ago
• YYHYlh / Apache-Dubbo-CVE-2023-23638-exp
  Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
  ☆224Updated last year
• kezibei / fastjson_payload
  ☆215Updated 8 months ago
• wh1t3p1g / tabby-path-finder
  A neo4j procedure for tabby
  ☆121Updated 2 weeks ago
• ccdr4gon / Dr4gonSword
  ☆96Updated last year
• Awrrays / Frame-DefaultPass
  所有碰到过的默认口令
  ☆103Updated last year
• webraybtl / zentaopms_poc
  禅道相关poc
  ☆165Updated 11 months ago
• Lonely-night / fastjsonVul
  fastjson 80 远程代码执行漏洞复现
  ☆194Updated 2 years ago
• Whoopsunix / PPPYSO
  proof-of-concept for generating Java deserialization payload | Proxy MemShell
  ☆193Updated 11 months ago
• 0range-x / dragon-lab
  ☆56Updated last year
• WinMin / Be-a-Docker-Escaper
  The container escape challenge of Be A RWCTFer competition (https://be-a-rwctfer.realworldctf.com/)
  ☆61Updated 2 months ago
• p1n93r / SpringBootAdmin-thymeleaf-SSTI
  SpringBootAdmin-thymeleaf-SSTI which can cause RCE
  ☆79Updated last year
• Y4tacker / HackingFernFlower
  2023白帽补天大会部分代码
  ☆124Updated last year
• woodpecker-appstore / jexpr-encoder-utils
  Java表达式语句生成器
  ☆190Updated last year
• X3NNY / sstilabs
  A lab to help you learning SSTI
  ☆105Updated last year
• Y4Sec-Team / mysql-jdbc-tricks
  JDBC Attack Tricks
  ☆142Updated last year
• kezibei / Urldns
  ☆322Updated 9 months ago
• Un1kTeam / Un1kFiles
  适用于burpsuite渗透工具的多类型恶意文件代码、漏洞测试payload、脚本代码快速获取复制的在线辅助插件。
  ☆65Updated 3 years ago
• whocansee / FilelessAgentMemShell
  无需文件落地Agent内存马生成器
  ☆237Updated last year
• depycode / fastjson-local-echo
  基于dbcp的fastjson rce 回显
  ☆192Updated 3 years ago
• baiyecha404 / CTFWEBchallenge
  Collections of CTF-WEB-challs mainly for review purpose.
  ☆30Updated last year
• FFreestanding / JavaUnserializeChain
  自己积累的一些Java反序列化利用链
  ☆89Updated 2 years ago
• yzddmr6 / Java-Js-Engine-Payloads
  Java Js Engine Payloads All in one
  ☆271Updated last year
• Bouquets-ai / BUG-Pocket
  小型漏洞库，提供FOFA语法及批量脚本，具体利用法请参考别的漏洞库，共4种类型47项
  ☆101Updated 3 years ago
• W01fh4cker / LearnFastjsonVulnFromZero-Basic
  【两万字原创】零基础学fastjson漏洞（基础篇），公众号：追梦信安
  ☆161Updated 7 months ago