gobysec/Research external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

gobysec/Research

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/gobysec/Research)

Close

gobysec / ResearchView on GitHubMore

• External links
• Readme badge

Research analysis

☆56Dec 2, 2025Updated 3 months ago

Alternatives and similar repositories for Research

Users that are interested in Research are comparing it to the libraries listed below

• gobysec / Weblogic

  View on GitHub
  WebLogic vulnerability exploration from beginner to expert.
  ☆156Apr 27, 2023Updated 2 years ago
• gobysec / Memory-Shell

  View on GitHub
  The king of shell -Javaweb Memory Shell
  ☆26Mar 29, 2023Updated 2 years ago
• luelueking / ClazzSearcher

  View on GitHub
  一款使用Yaml定义搜索规则来搜索Class的工具
  ☆108Aug 2, 2023Updated 2 years ago
• Y4Sec-Team / mysql-jdbc-tricks

  View on GitHub
  JDBC Attack Tricks
  ☆154Sep 3, 2023Updated 2 years ago
• 4ra1n / __asm__

  View on GitHub
  Java Inline ASM Library (一个Java内联汇编的库，可以让你在普通Java代码中插入任意的JVM指令，实现类似内联汇编的功能)
  ☆26Dec 5, 2022Updated 3 years ago
• ax1sX / SpringSecurity

  View on GitHub
  A list for Spring Security
  ☆128Jan 16, 2024Updated 2 years ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆93Jan 17, 2023Updated 3 years ago
• Sec-Fork / slcx

  View on GitHub
  基于tls加密通道的端口转发工具，绕过安全设备流量检测。
  ☆18Aug 5, 2023Updated 2 years ago
• luelueking / Deserial_Sink_With_JDBC

  View on GitHub
  Some ReadObject Sink With JDBC
  ☆243May 8, 2024Updated last year
• yzddmr6 / Java-Js-Engine-Payloads

  View on GitHub
  Java Js Engine Payloads All in one
  ☆289Aug 21, 2023Updated 2 years ago
• Esonhugh / SpringCloudHeapdump

  View on GitHub
  anonymous to cluster-admin via Heapdump.
  ☆30Nov 16, 2023Updated 2 years ago
• Whoopsunix / utf-8-overlong-encoding

  View on GitHub
  抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组
  ☆139Mar 11, 2024Updated last year
• nccgroup / kubetcd

  View on GitHub
  Post-exploit a compromised etcd, gain persistence and remote shell to nodes.
  ☆91May 7, 2024Updated last year
• tabby-sec / tabby-intellij-plugin

  View on GitHub
  A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily
  ☆39Nov 12, 2024Updated last year
• tabby-sec / tabby-path-finder

  View on GitHub
  A neo4j procedure for tabby
  ☆137May 17, 2025Updated 9 months ago
• Y4Sec-Team / CVE-2023-21939

  View on GitHub
  JDK CVE-2023-21939
  ☆94Aug 26, 2023Updated 2 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• TryGOTry / Debug-Nps

  View on GitHub
  在原版nps的基础上，增加了nps探测，以及对应的利用方式（如获取cookie，页面等），进行一些简单的二开。未经过大量测试，可能存在bug。
  ☆21Aug 5, 2025Updated 6 months ago
• qwqdanchun / Little-CRT

  View on GitHub
  ☆11Sep 30, 2023Updated 2 years ago
• minhangxiaohui / JavaAgentMemshell

  View on GitHub
  JavaAgent内存马实现、检测、修复demo
  ☆11Dec 7, 2022Updated 3 years ago
• zhzyker / my-speech

  View on GitHub
  我的演讲 ppt or pdf 归档库
  ☆10Mar 28, 2021Updated 4 years ago
• SiddharthBharadwaj / prettyrecon-cli

  View on GitHub
  PrettyRecon-cli is an unofficial cli client for PrettyRecon. This tool can be used to trigger various tasks on prettyrecon as well as fe…
  ☆10May 9, 2025Updated 9 months ago
• ax1sX / Automation-in-Java-Security

  View on GitHub
  ☆10Jul 21, 2022Updated 3 years ago
• getpanic / code_scan

  View on GitHub
  代码审计关键词扫描工具
  ☆11Apr 29, 2024Updated last year
• ambionics / vbulletin-exploits

  View on GitHub
  Exploits targeting vBulletin.
  ☆75Apr 15, 2023Updated 2 years ago
• Boogipop / Netty-WebFlux-Memshell

  View on GitHub
  Netty/WebFlux 内存马
  ☆26Nov 19, 2023Updated 2 years ago
• reveng007 / ReflectiveNtdll

  View on GitHub
  A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…
  ☆180Feb 10, 2023Updated 3 years ago
• phith0n / zkar

  View on GitHub
  ZKar is a Java serialization protocol analysis tool implement in Go.
  ☆647Feb 15, 2025Updated last year
• 0xrumble / BytecodeScreen

  View on GitHub
  ☆50Nov 4, 2022Updated 3 years ago
• KpLi0rn / ysoserial

  View on GitHub
  在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆68Sep 14, 2021Updated 4 years ago
• kyo-w / router-router

  View on GitHub
  Java web路由内存分析工具
  ☆437May 22, 2025Updated 9 months ago
• susMdT / SharpIndirectSyscalls

  View on GitHub
  ☆11Feb 12, 2023Updated 3 years ago
• jiashaoxiong1998 / fernflower

  View on GitHub
  ☆10May 17, 2023Updated 2 years ago
• xiaoy-sec / USBShutdown

  View on GitHub
  反取证程序，类似usbkill
  ☆11Apr 22, 2023Updated 2 years ago
• TraiLeR2 / CVE-2023-36168

  View on GitHub
  An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component
  ☆11Aug 5, 2023Updated 2 years ago
• AlphabugX / httpscan

  View on GitHub
  httpscan 用于C段http资产快速扫描，目前只支持80端口。(多线程)
  ☆10Jan 20, 2022Updated 4 years ago
• lz520520 / mimikatz

  View on GitHub
  A little tool to play with Windows security
  ☆12Jan 21, 2026Updated last month
• BeichenDream / GodzillaMemoryShellProject

  View on GitHub
  ☆307Feb 27, 2025Updated last year
• potats0 / javaSerializationTools

  View on GitHub
  ☆143Jan 21, 2021Updated 5 years ago