codeplutos / java-security-manager-bypass

Related projects ⓘ

Alternatives and complementary repositories for java-security-manager-bypass

• Lonely-night / fastjson_gadgets_scanner
  ☆130Updated 2 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Updated 4 years ago
• pwntester / JRE8u20_RCE_Gadget
  JRE8u20_RCE_Gadget
  ☆252Updated 8 years ago
• QAX-A-Team / SerialWriter
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆104Updated 6 years ago
• Ruil1n / after-deserialization-attack
  Java After-Deserialization Attack
  ☆79Updated 3 years ago
• genxor / Deserialize
  ☆69Updated 5 years ago
• bigBestWay / ice
  Use java instrument API without JAR file
  ☆44Updated 2 years ago
• Ramos-dev / R9000
  ☆58Updated 4 years ago
• LeadroyaL / java-xxe-defense-demo
  java xxe defense demo
  ☆46Updated 5 years ago
• threedr3am / FindClassInJars
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Updated 4 years ago
• gitrobtest / Java-Security
  Java Security Documents
  ☆79Updated 5 years ago
• Afant1 / RemoteObjectInvocationHandler
  bypass JEP290 RaspHook code
  ☆62Updated 4 years ago
• mogwailabs / rmi-deserialization
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Updated 5 years ago
• bit4woo / Java_deserialize_vuln_lab
  Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
  ☆87Updated 5 years ago
• boundaryx / cloudrasp-log4j2
  一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…
  ☆122Updated 2 years ago
• jas502n / fastjson-RCE
  fastjson-1.2.47
  ☆66Updated 5 years ago
• QAX-A-Team / redis_lua_exploit
  ☆143Updated 6 years ago
• threedr3am / log-agent
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆126Updated 4 years ago
• hex0wn / learn-java-bug
  ☆72Updated 2 years ago
• Ant-FG-Lab / non_RCE
  ☆41Updated 3 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆51Updated last year
• JoyChou93 / trident
  Java通用漏洞修复安全组件
  ☆58Updated 7 years ago
• paul-axe / ctf
  CTF stuff
  ☆40Updated last year
• proudwind / struts2_vulns
  Struts2 vuln env
  ☆43Updated last year
• zsxsoft / reGeorg
  A modified reGeorg for One-line PHP Shell.
  ☆86Updated 6 years ago
• phith0n / realworldctf
  My Real World CTF challenges
  ☆115Updated 5 years ago