java代码审计笔记
☆21Jun 8, 2024Updated last year
Alternatives and similar repositories for java-Code-Audit
Users that are interested in java-Code-Audit are comparing it to the libraries listed below
Sorting:
- 渗透测试目录扫描字典☆69Updated this week
- Java代码审计学习笔记☆13Dec 20, 2024Updated last year
- A Online PHP FilterChain Generator.☆17Aug 3, 2024Updated last year
- 内网渗透学习的一份记录 mark☆12Sep 24, 2023Updated 2 years ago
- HaeToYakit是一个将hae配置文件转换为yakit适配的配置文件脚本☆84Sep 10, 2024Updated last year
- 工控设备信息识别工具箱☆56Dec 4, 2025Updated 3 months ago
- 内存马生成工具 Tomcat、Weblogic、CMD、Behinder、Godzilla、Suo5......☆31Feb 18, 2025Updated last year
- 用友NC漏洞批量检测工具，支持POC显示、单一检测、批量检测、结果导出、AI交互等☆46Sep 8, 2025Updated 6 months ago
- 基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell☆21Dec 6, 2021Updated 4 years ago
- CVE-2024-21006 exp☆17Jul 29, 2024Updated last year
- 织梦全版本漏洞扫描修改版本☆39Aug 18, 2024Updated last year
- PHP代码审计案例-1000PHP☆27Aug 20, 2024Updated last year
- 一个简单的远程分离的加载器,免杀国内大部分杀软(360 火绒 Windows Defender 金山毒霸 电脑管家)☆82Jun 29, 2024Updated last year
- 【Hello-CTF labs】开箱即用的多靶场集成虚拟机，你只管刷题，剩下的交给我~☆11Mar 10, 2025Updated last year
- BpArsenal, a Burp Suite plugin that can quickly convert http requests into command-line tool execution, launch third-party tools and open…☆22Oct 31, 2025Updated 4 months ago
- ☆32Jan 24, 2025Updated last year
- CLI script to use GadgetProbe as a library to generate serialized payloads of DNS callbacks to free DNSbin to probe what Java classpaths …☆14Jun 8, 2021Updated 4 years ago
- Java静态代码安全审计工具，使用JavaParser项目做语法分析，计划支持常见的Web漏洞与组件漏洞☆21Sep 20, 2021Updated 4 years ago
- 利用代理驱动绕过JDBC Attack检测☆143Jun 15, 2025Updated 9 months ago
- ARL-Core官方仓库备份项目：集漏洞验证和漏洞利用的一个框架☆37May 21, 2024Updated last year
- DLL Unhooking☆12Mar 26, 2021Updated 4 years ago
- WannaCry_HTA 是一个基于 HTA（HTML Application）技术开发的高度仿真 WannaCry 勒索病毒界面模拟程序。该项目简单、完全可控，专为安全研究、应急演练和安全教育场景设计。界面UI参考zR00t1师傅项目编写。☆25Aug 13, 2025Updated 7 months ago
- 免杀☆12May 6, 2024Updated last year
- 红蓝对抗快速搭建基础设施平台☆36Dec 2, 2022Updated 3 years ago
- 自动化扫描利器，指纹识别更精准，漏洞扫描更全面☆376Oct 29, 2025Updated 4 months ago
- hscan 网络资产收集与漏洞扫描探活 服务扫描(常规 & 非常规端口)、 poc探测( xray v2 & nuclei 格式) 、数据库等弱口令爆破 、内网常见漏洞利用☆97Jan 6, 2025Updated last year
- 一款基于James Forshaw的.NET Remoting反序列化工具升级版在TypeFilterLevel.Low模式无文件payload任意代码执行poc的开发心得☆48Jan 23, 2025Updated last year
- Place for random PoCs☆18May 21, 2020Updated 5 years ago
- 微信公众号安全漏洞文章链接聚合☆28Updated this week
- 自己零零散散研究以及收集的一些免杀技巧，以便为后续查阅，拓宽思路☆15Dec 11, 2019Updated 6 years ago
- ☆12Nov 25, 2024Updated last year
- A tiny runtime hot patch tool for JAVA☆14Dec 22, 2024Updated last year
- ☆68Jul 29, 2025Updated 7 months ago
- CraftCMS RCE Checker (CVE-2025-32432)☆10Apr 27, 2025Updated 10 months ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆55Oct 29, 2022Updated 3 years ago
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆39Nov 12, 2024Updated last year
- sf is an efficient subdomain brute-forcing tool☆16Oct 13, 2023Updated 2 years ago
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆18Aug 25, 2025Updated 6 months ago
- Exploit for CVE-2025-55182 & CVE-2025-66478☆131Dec 10, 2025Updated 3 months ago