基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。
☆97Jun 15, 2026Updated 4 months ago
Alternatives and similar repositories for LearnJavaMemshellFromZero-Recurrence
Users that are interested in LearnJavaMemshellFromZero-Recurrence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 在Java安全学习过程中的笔记和代码☆123Oct 11, 2026Updated 2 weeks ago
- 某软最新公开gadgegt,新加入不出网利用。☆89Sep 6, 2024Updated 2 years ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆573Sep 12, 2026Updated last month
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆589Feb 7, 2026Updated 8 months ago
- Jetty&JDK 均为高版本下的内存马注入☆17Sep 3, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆170Jun 15, 2026Updated 4 months ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆183Apr 17, 2024Updated 2 years ago
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆28Sep 28, 2025Updated last year
- 利用代理驱动绕过JDBC Attack检测☆144Jun 15, 2025Updated last year
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆601May 4, 2026Updated 5 months ago
- 关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新☆151Apr 24, 2024Updated 2 years ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,611Updated this week
- ASP & ASP.NET WebShell Bypass☆73Jan 4, 2026Updated 9 months ago
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆267Feb 15, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- java-web 自动化鉴权绕过☆381Apr 3, 2025Updated last year
- 针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT …☆287Aug 12, 2025Updated last year
- xxl-job漏洞综合利用工具☆159Jun 3, 2025Updated last year
- xxl-job内存马☆234Jan 26, 2025Updated last year
- API Highlighter 是一个用于 BurpSuite 的插件，主要用于 web 应用迭代安全测试时高亮指定的新增接口，该插件最初用 Python 编写，现重构为 Java 版本。☆42Feb 19, 2025Updated last year
- 【三万字原创】完全零基础从0到1掌握Java内存马，公众号：追梦信安☆1,020May 25, 2025Updated last year
- 让fscan再次伟大☆372Sep 28, 2026Updated last month
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- Java Vulnerability Exploitation Platform☆2,190Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权 限后，快速收集目标系统的信息和凭据。☆256Apr 29, 2025Updated last year
- java-agent内存马一键注入服务器维权工具，支持自定义路径、校验和内存马内容。☆151Oct 16, 2026Updated 2 weeks ago
- 用友漏洞综合利用工具☆272Nov 9, 2024Updated last year
- Fastjson + MySQL 条件下不出网利用测试环境☆51Dec 6, 2025Updated 10 months ago
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆288Jul 17, 2025Updated last year
- 集权利用工具☆166Feb 28, 2025Updated last year
- 记录2025hvvpoc☆260Jul 29, 2025Updated last year
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆124Jul 30, 2026Updated 2 months ago
- xxljob-Hessian-Exp 一款XXL-JOB <=2.0.1 Hessian反序列化图形化利用工具，可不出网利用☆36Dec 31, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- a golang based dotnet ysoserial poc generation tool. Operated by cursor and reproduce from metasploit☆15Nov 12, 2025Updated 11 months ago
- 自动生成nuclei 2025HW poc☆128Jul 25, 2025Updated last year
- 亿赛通电子文档安全管理系统XStream反序列化漏洞任意文件上传利用☆124Aug 9, 2024Updated 2 years ago
- suo5的二开改进，一款高性能，代码标准的 HTTP 代理隧道工具☆77Sep 5, 2025Updated last year
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- 分享ABC_123自己改造的ysoserial工具，java反序列化漏洞利用，生成的java反序列化利用链支持jdk1.5版本的老旧系统的利用。☆57Mar 16, 2025Updated last year
- 针对Navicat的后渗透利用框架☆343Mar 21, 2025Updated last year