Alternatives and similar repositories for jrasp-agent

Users that are interested in jrasp-agent are comparing it to the libraries listed below

• kyo-w / router-router

  View on GitHub
  Java web路由内存分析工具
  ☆437May 22, 2025Updated 8 months ago
• woodpecker-appstore / jexpr-encoder-utils

  View on GitHub
  Java表达式语句生成器
  ☆194Oct 9, 2023Updated 2 years ago
• luelueking / Deserial_Sink_With_JDBC

  View on GitHub
  Some ReadObject Sink With JDBC
  ☆243May 8, 2024Updated last year
• BytecodeDL / ByteCodeDL

  View on GitHub
  A declarative static analysis tool for jvm bytecode based Datalog like CodeQL
  ☆344Jan 6, 2024Updated 2 years ago
• yzddmr6 / Java-Js-Engine-Payloads

  View on GitHub
  Java Js Engine Payloads All in one
  ☆289Aug 21, 2023Updated 2 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆822Sep 23, 2022Updated 3 years ago
• BeichenDream / GodzillaMemoryShellProject

  View on GitHub
  ☆306Feb 27, 2025Updated 11 months ago
• tabby-sec / tabby

  View on GitHub
  A CAT called tabby ( Code Analysis Tool )
  ☆1,635Jan 17, 2026Updated 3 weeks ago
• rzte / agentcrack

  View on GitHub
  不那么一样的 Java Agent 内存马
  ☆289Nov 27, 2023Updated 2 years ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆438Sep 10, 2021Updated 4 years ago
• tabby-sec / tabby-path-finder

  View on GitHub
  A neo4j procedure for tabby
  ☆137May 17, 2025Updated 8 months ago
• waderwu / extractor-java

  View on GitHub
  CodeQL extractor for java, which don't need to compile java source
  ☆349Nov 25, 2022Updated 3 years ago
• luelueking / ClazzSearcher

  View on GitHub
  一款使用Yaml定义搜索规则来搜索Class的工具
  ☆108Aug 2, 2023Updated 2 years ago
• SummerSec / SPATool

  View on GitHub
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆132Jul 12, 2023Updated 2 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆753Apr 14, 2021Updated 4 years ago
• h2-stack / LL-RASP

  View on GitHub
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆69Oct 19, 2025Updated 3 months ago
• turn1tup / JvmRaspBypass

  View on GitHub
  ☆21Oct 7, 2022Updated 3 years ago
• alipay / ant-application-security-testing-benchmark

  View on GitHub
  xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".
  ☆460Jan 15, 2026Updated last month
• phith0n / zkar

  View on GitHub
  ZKar is a Java serialization protocol analysis tool implement in Go.
  ☆643Feb 15, 2025Updated last year
• Whoopsunix / utf-8-overlong-encoding

  View on GitHub
  抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组
  ☆139Mar 11, 2024Updated last year
• flowerwind / JspFinder

  View on GitHub
  一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)
  ☆176Jan 4, 2022Updated 4 years ago
• whocansee / FilelessAgentMemShell

  View on GitHub
  无需文件落地Agent内存马生成器
  ☆248May 30, 2024Updated last year
• Firebasky / CodeqlLearn

  View on GitHub
  记录学习codeql的过程
  ☆394Jun 9, 2023Updated 2 years ago
• BeichenDream / JDR

  View on GitHub
  ☆146Jan 16, 2023Updated 3 years ago
• Rvn0xsy / DumperAnalyze

  View on GitHub
  通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩，可以做一些破解、加密验证的绕过等操作
  ☆116Jun 18, 2024Updated last year
• achuna33 / Memoryshell-JavaALL

  View on GitHub
  收集内存马打入方式
  ☆506May 20, 2022Updated 3 years ago
• su18 / MemoryShell

  View on GitHub
  JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring
  ☆651Jun 25, 2021Updated 4 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,239Feb 17, 2025Updated 11 months ago
• Y4Sec-Team / mysql-jdbc-tricks

  View on GitHub
  JDBC Attack Tricks
  ☆154Sep 3, 2023Updated 2 years ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆93Jan 17, 2023Updated 3 years ago
• luelueking / jvm-sandbox-rasp

  View on GitHub
  一个基于jvm-sandbox高度定制化rasp
  ☆58Sep 28, 2023Updated 2 years ago
• Y4Sec-Team / CVE-2023-21939

  View on GitHub
  JDK CVE-2023-21939
  ☆94Aug 26, 2023Updated 2 years ago
• pen4uin / java-echo-generator

  View on GitHub
  一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.
  ☆461Jan 12, 2025Updated last year
• Whoopsunix / JavaRce

  View on GitHub
  Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式
  ☆545Mar 6, 2025Updated 11 months ago
• webraybtl / CodeQLpy

  View on GitHub
  CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。
  ☆845Jul 6, 2023Updated 2 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,015Oct 15, 2020Updated 5 years ago
• l3yx / jdwp-codeifier

  View on GitHub
  基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）
  ☆321Dec 22, 2024Updated last year
• 4ra1n / code-inspector

  View on GitHub
  JavaWeb漏洞审计工具，构建方法调用链并模拟栈帧进行分析
  ☆334Jun 3, 2023Updated 2 years ago
• lz2y / DubboPOC

  View on GitHub
  Apache Dubbo漏洞测试Demo及其POC
  ☆65Mar 27, 2023Updated 2 years ago