基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。
☆96Jun 15, 2026Updated 3 months ago
Alternatives and similar repositories for LearnJavaMemshellFromZero-Recurrence
Users that are interested in LearnJavaMemshellFromZero-Recurrence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 在Java安全学习过程中的笔记和代码☆120Aug 2, 2026Updated last month
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆574Sep 12, 2026Updated last week
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆593Feb 7, 2026Updated 7 months ago
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆171Jun 15, 2026Updated 3 months ago
- 利用代理驱动绕过JDBC Attack检测☆143Jun 15, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆27Sep 28, 2025Updated 11 months ago
- Jetty&JDK 均为高版本下的内存马注入☆17Sep 3, 2025Updated last year
- 某软最新公开gadgegt,新加入不出网利用。☆89Sep 6, 2024Updated 2 years ago
- 关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新☆149Apr 24, 2024Updated 2 years ago
- ASP & ASP.NET WebShell Bypass☆72Jan 4, 2026Updated 8 months ago
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆265Feb 15, 2026Updated 7 months ago
- API Highlighter 是一个用于 BurpSuite 的插件，主要用于 web 应用迭代安全测试时高亮指定的新增接口，该插件最初用 Python 编写，现重构为 Java 版本。☆42Feb 19, 2025Updated last year
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆289Jul 17, 2025Updated last year
- 让fscan再次伟大☆369Aug 13, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队 成员的工作流程，提升攻防效率☆1,596Aug 30, 2026Updated 2 weeks ago
- 集权利用工具☆164Feb 28, 2025Updated last year
- java-agent内存马一键注入服务器维权工具，支持自定义路径、校验和内存马内容。☆150Aug 26, 2026Updated 3 weeks ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆182Apr 17, 2024Updated 2 years ago
- xxl-job漏洞综合利用工具☆158Jun 3, 2025Updated last year
- 自动生成nuclei 2025HW poc☆127Jul 25, 2025Updated last year
- 针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT …☆287Aug 12, 2025Updated last year
- 记录2025hvvpoc☆261Jul 29, 2025Updated last year
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆599May 4, 2026Updated 4 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Java Vulnerability Exploitation Platform☆2,162Aug 22, 2026Updated 3 weeks ago
- 优化后的URLFinder，可以通过自定义的正则表达式，对页面中的各类敏感信息提取☆152Jan 20, 2025Updated last year
- 分享ABC_123自己改造的ysoserial工具，java反序列化漏洞利用，生成的java反序列化利用链支持jdk1.5版本的老旧系统的利用。☆59Mar 16, 2025Updated last year
- Fastjson + MySQL 条件下不出网利用测试环境☆51Dec 6, 2025Updated 9 months ago
- IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）☆580Mar 10, 2025Updated last year
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆256Apr 29, 2025Updated last year
- xxljob-Hessian-Exp 一款XXL-JOB <=2.0.1 Hessian反序列化图形化利用工具，可不出网利用☆36Dec 31, 2024Updated last year
- Geoserver综合利用工具☆132Jan 7, 2026Updated 8 months ago
- 记录一些代码审计过的源码☆181Feb 26, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 在Android Studio上搭建一套2026年最新的APP渗透环境，文章从去年年底开始构建共计耗时一个月（中间因为Android某些版本兼容性推翻了几次），这篇文章发出来了就是全部成功了🌟。☆116Jun 12, 2026Updated 3 months ago
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆122Aug 9, 2024Updated 2 years ago
- 用于快速启动tabby 分析漏洞或者gadget的环境☆91Jul 14, 2025Updated last year
- a golang based dotnet ysoserial poc generation tool. Operated by cursor and reproduce from metasploit☆15Nov 12, 2025Updated 10 months ago
- hessian反序列化利用工具☆41Apr 11, 2026Updated 5 months ago
- xxl-job内存马☆234Jan 26, 2025Updated last year
- suo5的二开改进，一款高性能，代码标准的 HTTP 代理隧道工具☆78Sep 5, 2025Updated last year