h3h3qaq / JDK-CodeQLDB-BuilderLinks
使用 Docker 一键构建 JDK 源码的 CodeQL 数据库,方便使用 CodeQL 查找 JDK 中的数据。
☆27Updated 5 months ago
Alternatives and similar repositories for JDK-CodeQLDB-Builder
Users that are interested in JDK-CodeQLDB-Builder are comparing it to the libraries listed below
Sorting:
- idea插件,快速生成反序列化中常用的方法,比如setFieldValue、createTemplatesImpl等☆28Updated last year
- 用于快速启动tabby 分析漏洞或者gadget的环境☆89Updated 3 months ago
- 之前方便自己研究RASP原理和绕过时顺手写的,用于快速启动和重置RASP环境☆71Updated last year
- 利用代理驱动绕过JDBC Attack检测☆134Updated 4 months ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆66Updated 3 months ago
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆99Updated 11 months ago
- JavaSec☆40Updated last year
- A Java Route Collection Tool☆102Updated last year
- 一个IDEA插件:一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件,复制到all-in-one文件夹,并自动添加为项目库。☆49Updated 2 months ago
- Next Generation Java WebShell Manager☆53Updated last month
- JDBC Attack Tricks☆148Updated 2 years ago
- java实现反序列化建立socket连接☆61Updated 9 months ago
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆52Updated 2 years ago
- 2023白帽补天大会部分代码☆128Updated last year
- Java bytecode line number restoration tool☆89Updated last month
- ☆19Updated 2 years ago
- 一些总结出来的gadget的flow,后续合适和加入新的flow☆28Updated 10 months ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑,实现 2 3 字节加密序列化数组☆138Updated last year
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆209Updated last year
- ☆12Updated 2 years ago
- JSHunter-一款针对于前端的未授权访问扫描工具☆72Updated 5 months ago
- 一个基于 Vineflower 引擎的多线程 Java 批量反编译工具,支持快速处理大量的 class 文件和 JAR 文件。☆56Updated 5 months ago
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆90Updated 3 months ago
- Java JDK 8-18 CodeQL databases☆16Updated last year
- Some ReadObject Sink With JDBC☆240Updated last year
- A lightweight reverse proxy server that converts TLS traffic to TCP, allowing secure communication between clients and upstream servers.☆77Updated last year
- ☆24Updated 7 months ago
- 检测查杀java内存马☆116Updated last year
- 一个集合了多种语言的实战化Web靶场 | A practical Web shooting range that integrates multiple languages☆76Updated last month
- 记录一些代码审计过的源码☆176Updated 7 months ago