hmt38 / java_Laplace_Fluid_Maid
javaweb的流量监控脚本，基于filter，也有jar版本，那天曹佬说它就取名叫拉普拉斯的流量女仆(java_Laplace_Fluid_Maid)好了
☆10Updated last year
Related projects ⓘ
Alternatives and complementary repositories for java_Laplace_Fluid_Maid
- Some ReadObject Sink With JDBC☆192Updated 6 months ago
- 是一些比赛中的好题，加上自己出的一些。。。☆44Updated 2 years ago
- 2023 各大 CTF 的比赛附件☆50Updated last year
- javaDeserializeLabs☆63Updated last year
- A Java Route Collection Tool☆86Updated 3 months ago
- ☆80Updated 7 months ago
- evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.☆84Updated 2 years ago
- Lessons for syntaxflow zero to hero☆44Updated 2 months ago
- check hikvision/ys7 api☆64Updated last year
- ☆54Updated 11 months ago
- fastjson 80 远程代码执行漏洞复现☆184Updated 2 years ago
- JavaSec☆25Updated 8 months ago
- 自己积累的一些Java反序列化利用链☆87Updated last year
- SpringBootAdmin-thymeleaf-SSTI which can cause RCE☆77Updated last year
- 《漏洞全解》该项目不提供任何的POC与EXP，仅仅分享各种机缘巧合下所产生的漏洞的分析。☆24Updated last year
- 在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆68Updated 3 years ago
- 为了准备 AWD，写了个 Filter 的集合☆62Updated last month
- 打造最强的Java安全研究与安全开发面试题库，包含问题和详细的答案，帮助师傅们找到满意的工作☆15Updated 2 years ago
- 一个AWD批量攻击框架☆21Updated 4 years ago
- 内网集权系统渗透测试笔记☆9Updated last month
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆69Updated 2 weeks ago
- 当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆78Updated 2 years ago
- Java命令行文件监控小工具(代码审计)☆97Updated 2 years ago
- Java代码审计案例☆22Updated 3 years ago
- CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库☆29Updated 2 years ago
- ☆18Updated 3 years ago
- Java表达式语句生成器☆179Updated last year
- 之前方便自己研究RASP原理和绕过时顺手写的，用于快速启动和重置RASP环境☆51Updated last month