h3h3qaq / JDK-CodeQLDB-BuilderLinks
使用 Docker 一键构建 JDK 源码的 CodeQL 数据库,方便使用 CodeQL 查找 JDK 中的数据。
☆27Updated 8 months ago
Alternatives and similar repositories for JDK-CodeQLDB-Builder
Users that are interested in JDK-CodeQLDB-Builder are comparing it to the libraries listed below
Sorting:
- 用于快速启动tabby 分析漏洞或者gadget的环境☆94Updated 6 months ago
- idea插件,快速生成反序列化中常用的方法,比如setFieldValue、createTemplatesImpl等☆29Updated last year
- 之前方便自己研究RASP原理和绕过时顺手写的,用于快速启动和重置RASP环境☆71Updated last year
- 利用代理驱动绕过JDBC Attack检测☆143Updated 7 months ago
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆106Updated last year
- Java bytecode line number restoration tool☆132Updated 5 months ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆71Updated 6 months ago
- A Java Route Collection Tool☆102Updated last year
- JavaSec☆43Updated last year
- 一些总结出来的gadget的flow,后续合适和加入新的flow☆64Updated last month
- ☆19Updated 2 years ago
- 一个专注于 Java Web 特性、配置和 Trick 的安全谜题集合☆115Updated last month
- 一个IDEA插件:一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件,复制到all-in-one文件夹,并自动添加为项目库。☆50Updated 3 months ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑,实现 2 3 字节加密序列化数组☆139Updated last year
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆53Updated 2 years ago
- JDBC Attack Tricks☆154Updated 2 years ago
- 一个基于 Vineflower 引擎的多线程 Java 批量反编译工具,支持快速处理大量的 class 文件和 JAR 文件。☆58Updated 9 months ago
- ☆14Updated 3 years ago
- Next Generation Java WebShell Manager☆67Updated last month
- java实现反序列化建立socket连接☆60Updated last year
- 2023白帽补天大会部分代码☆129Updated 2 years ago
- Some ReadObject Sink With JDBC☆243Updated last year
- A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily☆39Updated last year
- A lightweight reverse proxy server that converts TLS traffic to TCP, allowing secure communication between clients and upstream servers.☆78Updated last year
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆92Updated 6 months ago
- 如何将Java反序列化Payload极致缩小☆69Updated 4 years ago
- 在xxe中使用smb外带多行内容☆101Updated 2 months ago
- JSHunter-一款针对于前端的未授权访问扫描工具☆84Updated 9 months ago
- 一个集合了多种语言的实战化Web靶场 | A practical Web shooting range that integrates multiple languages☆81Updated last month
- 检测查杀java内存马☆125Updated 2 years ago