Alternatives and similar repositories for JavaSecurity:

Users that are interested in JavaSecurity are comparing it to the libraries listed below

• dschadow / Java-Web-Security
  Java-Web-Security - Sichere Webanwendungen mit Java entwickeln
  ☆217Updated this week
• frohoff / marshalsec
  ☆74Updated 7 years ago
• veracode-research / actuator-testbed
  A vulnerable application exposing Spring Boot Actuators
  ☆121Updated 5 years ago
• Contrast-Security-OSS / joogle
  A static analysis API for finding deserialization attack gadgets
  ☆38Updated 2 years ago
• mpgn / Spring-Boot-Actuator-Exploit
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆318Updated 4 years ago
• matthiaskaiser / jmet
  Java Message Exploitation Tool
  ☆498Updated 2 years ago
• 0Kee-Team / JavaProbe
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Updated 3 years ago
• mogwailabs / rmi-deserialization
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Updated 5 years ago
• NickstaDB / DeserLab
  Java deserialization exploitation lab.
  ☆236Updated 5 years ago
• pwntester / SerialKillerBypassGadgetCollection
  Collection of bypass gadgets to extend and wrap ysoserial payloads
  ☆351Updated 2 years ago
• pwntester / JRE8u20_RCE_Gadget
  JRE8u20_RCE_Gadget
  ☆252Updated 8 years ago
• ikkisoft / SerialKiller
  Look-Ahead Java Deserialization Library
  ☆411Updated 5 years ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆241Updated 7 years ago
• momosecurity / mosec-maven-plugin
  用于检测maven项目的第三方依赖组件是否存在安全漏洞。
  ☆103Updated 2 years ago
• guardrailsio / awesome-java-security
  Awesome Java Security Resources 🕶☕🔐
  ☆306Updated last year
• cdaller / security_taint_propagation
  Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.
  ☆28Updated 6 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆306Updated 2 years ago
• CaledoniaProject / CVE-2018-1270
  Spring messaging STOMP protocol RCE
  ☆114Updated 6 years ago
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆74Updated 3 years ago
• ozzi- / JWT4B
  JWT Support for Burp
  ☆249Updated 6 months ago
• irsl / jackson-rce-via-spel
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆122Updated 7 years ago
• quentinhardy / jndiat
  JNDI Attacking Tool
  ☆236Updated 2 years ago
• mogwailabs / mjet
  MOGWAI LABS JMX exploitation toolkit
  ☆200Updated last year
• MagicZer0 / fastjson-rce-exploit
  exploit for fastjson remote code execution vulnerability
  ☆152Updated 2 years ago
• artsploit / SecLists
  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in …
  ☆139Updated 6 years ago
• gitrobtest / Java-Security
  Java Security Documents
  ☆79Updated 5 years ago
• baidu-security / openrasp-testcases
  OpenRASP 漏洞测试环境
  ☆305Updated last year
• frohoff / inspector-gadget
  Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language
  ☆104Updated 8 years ago
• veracode-research / spring-view-manipulation
  When MVC magic turns black
  ☆291Updated 4 years ago
• zerothoughts / spring-jndi
  Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
  ☆116Updated 5 years ago