自学时写的适合Java安全小白用来学习Java反序列化漏洞的文章和Demo。(随懒狗的学习进度持续更新🐶)。Some articles and demos written during self-study which are suitable for Java Security beginner to learn the Insecure Deserialization.
☆11Dec 22, 2021Updated 4 years ago
Alternatives and similar repositories for JavaUnserialization
Users that are interested in JavaUnserialization are comparing it to the libraries listed below
Sorting:
- java反序列化学习笔记☆16Nov 17, 2021Updated 4 years ago
- ☆10Jul 21, 2022Updated 3 years ago
- Tao(道)一款用于java语言函数调用关系生成的工具,致力于提高java代码审计效率。☆11Jul 2, 2024Updated last year
- ☆20Jan 8, 2026Updated last month
- 废物自救项目!一起向光而行!!!☆11May 7, 2022Updated 3 years ago
- ☆13Oct 6, 2022Updated 3 years ago
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- Allow Nexus users to test their applications against the Snyk vulnerability database☆20Aug 26, 2025Updated 6 months ago
- 一款信息泄漏利用工具,适用于.git/.svn/.DS_Store泄漏和目录列出(dumpall Golang重构版)☆21Apr 8, 2025Updated 10 months ago
- 可以从公开仓库直接拖取镜像的一个小工具 方便直接解包审计代码☆13Feb 11, 2023Updated 3 years ago
- PHP文件上传50+绕过手法全景解析☆17Mar 16, 2025Updated 11 months ago
- 爬取全国的手机号码/Get all the Chinese phone number from web☆19Nov 1, 2019Updated 6 years ago
- Burp插件 TLA Watcher:分为两个模块:流量管理模块、扩展功能模块(脆弱风险检测)☆39Nov 13, 2025Updated 3 months ago
- this_my_ctf☆17Nov 17, 2021Updated 4 years ago
- 是我阅读各种源码写的笔记☆73Sep 15, 2022Updated 3 years ago
- ☆19Jun 7, 2023Updated 2 years ago
- 【Hello-CTF labs】新手向的ssrf靶场,从协议,场景,绕过等多个ssrf攻击的基础维度展开。☆55Mar 22, 2025Updated 11 months ago
- jshERP Exploit GUI☆23Aug 26, 2024Updated last year
- ☆55Dec 29, 2021Updated 4 years ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆87Jul 21, 2022Updated 3 years ago
- ☆94May 14, 2025Updated 9 months ago
- java反序列化漏洞笔记☆23Apr 6, 2019Updated 6 years ago
- 非安全合订本和专辑☆60Apr 30, 2022Updated 3 years ago
- 若依4.8.0后台RCE☆27May 21, 2025Updated 9 months ago
- CVE-2024-36401 图形化利用工具,支持各个JDK版本利用以及回显、内存马实现