自学时写的适合Java安全小白用来学习Java反序列化漏洞的文章和Demo。(随懒狗的学习进度持续更新🐶)。Some articles and demos written during self-study which are suitable for Java Security beginner to learn the Insecure Deserialization.
☆12Dec 22, 2021Updated 4 years ago
Alternatives and similar repositories for JavaUnserialization
Users that are interested in JavaUnserialization are comparing it to the libraries listed below
Sorting:
- 就是一个练习Java反序列化的最简单环境☆15Dec 24, 2021Updated 4 years ago
- Allow Nexus users to test their applications against the Snyk vulnerability database☆20Aug 26, 2025Updated 6 months ago
- java反序列化学习笔记☆16Nov 17, 2021Updated 4 years ago
- 文件隐写小工具☆19May 20, 2024Updated last year
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- 废物自救项目！一起向光而行！！！☆11May 7, 2022Updated 3 years ago
- this_my_ctf☆18Nov 17, 2021Updated 4 years ago
- ☆10Jul 21, 2022Updated 3 years ago
- 可以从公开仓库直接拖取镜像的一个小工具 方便直接解包审计代码☆13Feb 11, 2023Updated 3 years ago
- ☆19Jan 8, 2026Updated 2 months ago
- PHP文件上传50+绕过手法全景解析☆17Mar 16, 2025Updated last year
- Tao（道）一款用于java语言函数调用关系生成的工具，致力于提高java代码审计效率。☆11Jul 2, 2024Updated last year
- Mooder是一款开源、安全、简洁、强大的团队内部知识分享平台。☆15Jul 3, 2025Updated 8 months ago
- 一个极简高效的 Windows 语音输入助手，基于 Rust 开发。支持全局热键一键录音上屏、灵动岛式状态悬浮窗、自动标点与中英文混合识别。轻量、无感、隐私安全。 Minimalist, high-performance voice-to-text assistant f…☆27Feb 21, 2026Updated 3 weeks ago
- 国光师傅的SSRF靶场docker环境☆45Sep 18, 2024Updated last year
- ☆32Jan 24, 2025Updated last year
- ssrf_proxy☆13Jun 9, 2023Updated 2 years ago
- simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。☆101Dec 23, 2025Updated 2 months ago
- 一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出(dumpall Golang重构版)☆21Apr 8, 2025Updated 11 months ago
- 7bits安全团队-《Java安全-记一次实战使用memoryshell》代码样例☆19Nov 13, 2022Updated 3 years ago
- 当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆88Jul 21, 2022Updated 3 years ago
- Burp插件 TLA Watcher：分为两个模块：流量管理模块、扩展功能模块（脆弱风险检测）☆39Nov 13, 2025Updated 4 months ago
- EventWatcher is an open-source library designed for real-time monitoring of Windows Event Logs. It offers an efficient solution for track…☆10Dec 19, 2025Updated 3 months ago
- 若依4.8.0后台RCE☆27May 21, 2025Updated 9 months ago
- 使得一加13T的侧边快捷键能被自定义功能。☆17Sep 3, 2025Updated 6 months ago
- 爬取全国的手机号码/Get all the Chinese phone number from web☆19Nov 1, 2019Updated 6 years ago
- This repo contains the codes and the notebooks used for the paper "DarkVec: Automatic Analysis of Darknet Traffic with Word Embeddings".☆13Feb 3, 2024Updated 2 years ago
- CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现☆39Jul 16, 2025Updated 8 months ago
- jshERP Exploit GUI☆22Aug 26, 2024Updated last year
- ☆10May 6, 2021Updated 4 years ago
- 是我阅读各种源码写的笔记☆72Sep 15, 2022Updated 3 years ago
- 【Hello-CTF labs】新手向的ssrf靶场，从协议，场景，绕过等多个ssrf攻击的基础维度展开。☆56Mar 22, 2025Updated 11 months ago
- ☆12Feb 21, 2022Updated 4 years ago
- Quest Soft Player in java☆11Mar 12, 2024Updated 2 years ago
- 基于LLM的狼人杀Agent，让AI自己玩狼人杀游戏，一个java版实现的“玩具”☆17Jun 6, 2024Updated last year
- Collections of CTF-WEB-challs mainly for review purpose.☆30Jul 16, 2023Updated 2 years ago
- EMQX Dashboard Malicious Plugin leading to RCE☆47Jun 16, 2025Updated 9 months ago
- 👴的毕设,打算从native层到java层的hook都搞一遍，最终目标是能支持hook用户apk的东西☆23May 9, 2022Updated 3 years ago
- ☆55Dec 29, 2021Updated 4 years ago