hmt38 / java_Laplace_Fluid_MaidLinks
javaweb的流量监控脚本,基于filter,也有jar版本,那天曹佬说它就取名叫拉普拉斯的流量女仆(java_Laplace_Fluid_Maid)好了
☆11Updated 2 years ago
Alternatives and similar repositories for java_Laplace_Fluid_Maid
Users that are interested in java_Laplace_Fluid_Maid are comparing it to the libraries listed below
Sorting:
- Some ReadObject Sink With JDBC☆243Updated last year
- 2023白帽补天大会部分代码☆129Updated 2 years ago
- javaDeserializeLabs☆70Updated 2 years ago
- 是一些比赛中的好题,加上自己出的一些。。。☆43Updated 3 years ago
- A Java Route Collection Tool☆102Updated last year
- idea插件,快速生成反序列化中常用的方法,比如setFieldValue、createTemplatesImpl等☆29Updated last year
- evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.☆97Updated 3 years ago
- Java表达式语句生成器☆194Updated 2 years ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆70Updated 5 months ago
- JavaSec☆42Updated last year
- 2023 各大 CTF 的比赛附件☆49Updated 2 years ago
- 用于快速启动tabby 分析漏洞或者gadget的环境☆94Updated 6 months ago
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆105Updated last year
- 一个专注于 Java Web 特性、配置和 Trick 的安全谜题集合☆113Updated 3 weeks ago
- 检测查杀java内存马☆125Updated 2 years ago
- 使用 Docker 一键构建 JDK 源码的 CodeQL 数据库,方便使用 CodeQL 查找 JDK 中的数据。☆27Updated 8 months ago
- 记录一些代码审计过的源码☆180Updated 10 months ago
- 无需文件落地Agent内存马生成器☆247Updated last year
- 基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本(动态执行Java/Js代码并获得回显)☆318Updated last year
- 一款基于污点分析的PHP扫描工具,能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径,同时支持单独对函数的扫描。☆162Updated 9 months ago
- 利用代理驱动绕过JDBC Attack检测☆143Updated 7 months ago
- 之前方便自己研究RASP原理和绕过时顺手写的,用于快速启动和重置RASP环境☆71Updated last year
- 一个集合了多种语言的实战化Web靶场 | A practical Web shooting range that integrates multiple languages☆81Updated last week
- CodeQL分析闭源Jar包脚本,基于Apache Ant构建CodeQL数据库☆41Updated 3 years ago
- ☆19Updated 2 years ago
- 一些总结出来的gadget的flow,后续合适和加入新的flow☆62Updated last month
- shiro加fastjson环境☆143Updated 3 years ago
- fastjson 80 远程代码执行漏洞复现☆200Updated 3 years ago
- 不那么一样的 Java Agent 内存马☆288Updated 2 years ago
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆219Updated last year