记录一些代码审计过的源码
☆183Feb 26, 2025Updated last year
Alternatives and similar repositories for CodeAudit
Users that are interested in CodeAudit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- 一款轻量级匹配Sink点的代码审计扫描器,为了帮助红队过程中快速代码审计的小工具☆409Oct 6, 2024Updated last year
- javaeasyscanner - 富婆系列,代码审计辅助工具,致力于解放大脑,方便双手☆278Jun 18, 2024Updated last year
- IDEA代码审计辅助插件(深信服深蓝实验室天威战队强力驱动)☆584Mar 10, 2025Updated last year
- 一款支持自定义的 Java 回显载荷生成工具|A customizable Java echo payload generation tool.☆462Jan 12, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- A list for Web Security and Code Audit☆1,229Dec 3, 2024Updated last year
- 某软最新公开gadgegt,新加入不出网利用。☆88Sep 6, 2024Updated last year
- 闭源系统半自动漏洞挖掘工具,针对 jar/war/zip 进行静态代码分析,输出从source到sink的可达路径。LLM将验证路径可达性,并根据上下文给出该路径可信分数☆509Jan 12, 2026Updated 2 months ago
- JavaGadgetGenerator 工具,支持 ysoserial,Hessian,字节码,Expr/SSTI,Shiro,JDBC 等 Gadget 生成,封装,混淆,出网延迟探测,内存马注入等...☆560Apr 3, 2026Updated last week
- Java漏洞调试分析集合☆91Mar 11, 2024Updated 2 years ago
- 一个使用Rust编写的SOCKS5代理池管理工具,能够自动测速、管理多个代理服务器,提供高效稳定的匿名代理服务。☆83Apr 16, 2025Updated 11 months ago
- 《深入JDBC安全:特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆575Feb 7, 2026Updated 2 months ago
- xxl-job内存马☆229Jan 26, 2025Updated last year
- 帆软bi反序列化漏洞利用工具☆191Mar 23, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- JNDI在java高版本的利用工具,FUZZ利用链☆599Oct 8, 2022Updated 3 years ago
- Confluence CVE 2021,2022,2023 利用工具,支持命令执行,哥斯拉,冰蝎 内存马注入☆557Feb 1, 2024Updated 2 years ago
- A Java Route Collection Tool☆102Aug 1, 2024Updated last year
- 用java实现构造openwire协议,利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆288Nov 20, 2023Updated 2 years ago
- 🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sink…☆784Mar 14, 2026Updated 3 weeks ago
- 无需文件落地Agent内存马生成器☆249May 30, 2024Updated last year
- 基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本(动态执行Java/Js代码并获得回显)☆322Dec 22, 2024Updated last year
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆573Feb 4, 2026Updated 2 months ago
- 一个 CLASS 文件混淆工具,支持方法字段参数名引用分析和重命名混淆,支持字符串提取/AES加密运行时解密/整型异或混淆/垃圾代码花指令混淆/错误注解崩溃/特殊字符迷惑用户/反编译器对抗/方法和字段的隐藏等,配置简单,容易上手☆311Jan 26, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- Java web路由内存分析工具☆439May 22, 2025Updated 10 months ago
- 一款Java内存马生成、测试工具,搭配@ax1sX的MemShell食用。☆263Feb 15, 2026Updated last month
- 寻找可利用的白文件☆560Aug 18, 2025Updated 7 months ago
- 使用 agent 实现反序列化 utf8 overlong☆84Apr 24, 2024Updated last year
- 根据攻防以及域信息收集经验dump快而有用的域信息☆103Aug 15, 2023Updated 2 years ago
- 【两万字原创】零基础学fastjson漏洞(提高篇),公众号:追梦信安☆211Dec 7, 2023Updated 2 years ago
- JAVA 安全靶场,IAST 测试用例,JAVA漏洞复现,代码审计,SAST测试用例,安全扫描(主动和被动),JAVA漏洞靶场,RASP测试用例 ; Java Security Testbed, IAST Test Cases, Java Vulnerability R…☆283Mar 24, 2026Updated 2 weeks ago
- 哥斯拉Hikvision综合安防后渗透插件,运行中心/web前台/MinIO 配置提取(解密)重置密码,还原密码。☆170Oct 8, 2024Updated last year
- 分割小工具,可分割木马,一键生成写入、合并、追加命令☆165Jan 5, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具,致力于简化安全研究人员和红队成员的工作流程,提升攻防效率☆1,401Mar 30, 2026Updated last week
- daydayExp的漏洞POC仓库,慢慢更新...☆376Nov 4, 2024Updated last year
- 让"WAF绕过"变得简单☆434Jan 26, 2025Updated last year
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,059Dec 2, 2025Updated 4 months ago
- 哥斯拉jsp/jspx免杀webshell生成器☆209Apr 28, 2023Updated 2 years ago
- Extract website information from Vue☆286Aug 29, 2023Updated 2 years ago
- 用友的一些反序列化链子以及1day,二开了狼组的YongYouNcTool,改了一下逻辑以及poc☆125Oct 12, 2024Updated last year