基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。
☆95Jun 15, 2026Updated last month
Alternatives and similar repositories for LearnJavaMemshellFromZero-Recurrence
Users that are interested in LearnJavaMemshellFromZero-Recurrence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 在Java安全学习过程中的笔记和代码☆116Aug 2, 2026Updated last week
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆576Apr 3, 2026Updated 4 months ago
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆594Feb 7, 2026Updated 6 months ago
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆169Jun 15, 2026Updated last month
- 利用代理驱动绕过JDBC Attack检测☆145Jun 15, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆28Sep 28, 2025Updated 10 months ago
- Jetty&JDK 均为高版本下的内存马注入☆18Sep 3, 2025Updated 11 months ago
- 某软最新公开gadgegt,新加入不出网利用。☆90Sep 6, 2024Updated last year
- 关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新☆149Apr 24, 2024Updated 2 years ago
- ASP & ASP.NET WebShell Bypass☆72Jan 4, 2026Updated 7 months ago
- 一款Java内存马 生成、测试工具，搭配@ax1sX的MemShell食用。☆265Feb 15, 2026Updated 5 months ago
- API Highlighter 是一个用于 BurpSuite 的插件，主要用于 web 应用迭代安全测试时高亮指定的新增接口，该插件最初用 Python 编写，现重构为 Java 版本。☆42Feb 19, 2025Updated last year
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆289Jul 17, 2025Updated last year
- 让fscan再次伟大☆364Jun 18, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 一款专注于 Java 主流 Web 中间件的内存马快速生 成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,570Updated this week
- 集权利用工具☆166Feb 28, 2025Updated last year
- java-agent内存马一键注入服务器维权工具，支持自定义路径、校验和内存马内容。☆132Nov 4, 2025Updated 9 months ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆184Apr 17, 2024Updated 2 years ago
- xxl-job漏洞综合利用工具☆161Jun 3, 2025Updated last year
- 自动生成nuclei 2025HW poc☆127Jul 25, 2025Updated last year
- 针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT …☆289Aug 12, 2025Updated 11 months ago
- 记录2025hvvpoc☆261Jul 29, 2025Updated last year
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆599May 4, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Java Vulnerability Exploitation Platform☆2,140Updated this week
- 优化后的URLFinder，可以通过自定义的正则表达式，对页面中的各类敏感信息提取☆153Jan 20, 2025Updated last year
- 分享ABC_123自己改造的ysoserial工具，java反序列化漏洞利用，生成的java反序列化利用链支持jdk1.5版本的老旧系统的利用。☆59Mar 16, 2025Updated last year
- Fastjson + MySQL 条件下不出网利用测试环境☆51Dec 6, 2025Updated 8 months ago
- IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）☆584Mar 10, 2025Updated last year
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆257Apr 29, 2025Updated last year
- xxljob-Hessian-Exp 一款XXL-JOB <=2.0.1 Hessian反序列化图形化利用工具，可不出网利用☆37Dec 31, 2024Updated last year
- Geoserver综合利用工具☆130Jan 7, 2026Updated 7 months ago
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆122Aug 9, 2024Updated 2 years ago
- 在Android Studio上搭建一套2026年最新的APP渗透环境，文章从去年年底开始构建共计耗时一个月（中间因为Android某些版本兼容性推翻了几次），这篇文章发出来了就是全部成功了🌟。☆112Jun 12, 2026Updated last month
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- a golang based dotnet ysoserial poc generation tool. Operated by cursor and reproduce from metasploit☆15Nov 12, 2025Updated 8 months ago
- hessian反序列化利用工具☆41Apr 11, 2026Updated 3 months ago
- xxl-job内存马☆232Jan 26, 2025Updated last year
- suo5的二开改进，一款高性能，代码标准的 HTTP 代理隧道工具☆79Sep 5, 2025Updated 11 months ago