keven1z/XXEDemo external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

keven1z/XXEDemo

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/keven1z/XXEDemo)

Close

keven1z / XXEDemoView on GitHubMore

• External links
• Readme badge

收集了java XXE漏洞的demo及修复方式

☆19Mar 11, 2024Updated 2 years ago

Alternatives and similar repositories for XXEDemo

Users that are interested in XXEDemo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• EXP-Docs / CVE-2020-13933

  View on GitHub
  CVE-2020-13933 靶场： shiro 认证绕过漏洞
  ☆14Apr 9, 2023Updated 3 years ago
• BabyTeam1024 / Docker_WeblogicAutoBuild

  View on GitHub
  ☆12Nov 16, 2020Updated 5 years ago
• imfht / super-Django-CC

  View on GitHub
  super-Django-CC is a simle web interface for commoncrawl.org
  ☆15Dec 8, 2022Updated 3 years ago
• pplsec / JavaVul

  View on GitHub
  JAVA Vul Code JAVA常见漏洞与防御代码示例
  ☆10Sep 18, 2018Updated 7 years ago
• SiJiDo / JAVA-Serialize-vuln

  View on GitHub
  java反序列化漏洞笔记
  ☆24Apr 6, 2019Updated 7 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• sairson / SharpADUserIP

  View on GitHub
  提取DC日志，快速获取域用户对应IP地址
  ☆19Sep 2, 2021Updated 4 years ago
• retanoj / BurpMultiProxy

  View on GitHub
  ☆13Feb 17, 2016Updated 10 years ago
• d4n-sec / jdb-mcp

  View on GitHub
  Java Debugger MCP Server. Enables AI agents to debug live Java apps via JDI with breakpoints, stack tracing, and variable inspection.
  ☆30Jan 30, 2026Updated 5 months ago
• Claradoll / Security_Learning

  View on GitHub
  ☆22Dec 5, 2022Updated 3 years ago
• yhy0 / JavaSerializeDemo

  View on GitHub
  Java反序列化漏洞学习
  ☆14Jul 1, 2021Updated 5 years ago
• vidar-team / hctf_backend

  View on GitHub
  ☆47Dec 7, 2022Updated 3 years ago
• sv3nbeast / ReadSun2Desk

  View on GitHub
  读取dump向日葵&Todesk进程的文件获得连接信息
  ☆16Sep 27, 2024Updated last year
• handbye / base64encode

  View on GitHub
  burpsuite POST数据包base64编码插件
  ☆17Mar 14, 2024Updated 2 years ago
• 0lh / SiteScan

  View on GitHub
  SiteScan是一款探测网站存活概率的工具
  ☆17Mar 4, 2020Updated 6 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• 0xbug / CVE-2019-8451

  View on GitHub
  https://jira.atlassian.com/browse/JRASERVER-69793
  ☆10Sep 16, 2019Updated 6 years ago
• Powershell-Offense / Post-Exploitation

  View on GitHub
  \ PowerAvails Powershell /
  ☆10Jun 30, 2018Updated 8 years ago
• chengable / safe_code

  View on GitHub
  absolute safe code
  ☆27Mar 20, 2017Updated 9 years ago
• l3yx / javaDeserializeNotes

  View on GitHub
  Java反序列化漏洞学习笔记
  ☆16Nov 17, 2019Updated 6 years ago
• Veraxy00 / SecVulList-Veraxy00

  View on GitHub
  发布一些我发现的漏洞以及利用脚本。
  ☆15Jun 29, 2023Updated 3 years ago
• H4cking2theGate / AuditSkills

  View on GitHub
  ☆34Mar 19, 2026Updated 4 months ago
• yukito / arachni-python-client

  View on GitHub
  Arachni is one of the famous web scanner. This project is python script to handle arachni api.
  ☆13Jun 4, 2018Updated 8 years ago
• QAX-A-Team / CVE-2018-20250

  View on GitHub
  010 Editor template for ACE archive format & CVE-2018-2025[0-3]
  ☆26Feb 22, 2019Updated 7 years ago
• oways / SA-CORE-2018-004

  View on GitHub
  SA-CORE-2018-004 POC #drupalgeddon3
  ☆41Apr 28, 2018Updated 8 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• mtxiaowangzi / Java-EE-VulnWeb

  View on GitHub
  用于演示Java Web项目中，漏洞的成因及修复方案，可用于黑盒测试和白盒测试，部分修复方案可用于生产环境。
  ☆43Apr 20, 2018Updated 8 years ago
• juanjolmm / java-secure-file-upload

  View on GitHub
  Java library used to upload files following the security steps described by OWASP
  ☆10Jun 7, 2021Updated 5 years ago
• admintony / ZZCMS_V8.2_GETSHELL

  View on GitHub
  ZZCMS v8.2-重装GETSHELL工具
  ☆11May 8, 2018Updated 8 years ago
• langligelang / maobugs

  View on GitHub
  java 漏洞平台包含各种CVE
  ☆23Jun 17, 2022Updated 4 years ago
• AntSwordProject / AntSword-JSP-Decoder

  View on GitHub
  Jsp Decoder Source Code
  ☆16Mar 23, 2021Updated 5 years ago
• y1ng1996 / Burp_Suite_Doc_zh_cn

  View on GitHub
  ☆22Sep 26, 2017Updated 8 years ago
• Dor-Tumarkin / CVE-2019-17564-FastJson-Gadget

  View on GitHub
  Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information …
  ☆16Dec 10, 2022Updated 3 years ago
• virusdefender / xsser

  View on GitHub
  一个xss利用平台
  ☆18Jun 1, 2014Updated 12 years ago
• woodpecker-framework / woodpecker-tools

  View on GitHub
  漏洞检测与利用常见api库
  ☆34Nov 20, 2022Updated 3 years ago
• Bare Metal GPUs on DigitalOcean Gradient AI • Ad
  Purpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
• girlkb / myVulnerabilityRecurrence

  View on GitHub
  漏洞复现记录
  ☆11Jun 18, 2019Updated 7 years ago
• YoDiDi / cors-jsonp

  View on GitHub
  就是一个burp插件啦(ÒܫÓױ)
  ☆17Sep 9, 2021Updated 4 years ago
• MagicZer0 / fastjson-rce-exploit

  View on GitHub
  exploit for fastjson remote code execution vulnerability
  ☆152Dec 16, 2022Updated 3 years ago
• votd / vulnerability-of-the-day

  View on GitHub
  A pedagogically-curated collection of vulnerability demonstrations for undergraduate software engineering students.
  ☆70Feb 5, 2026Updated 5 months ago
• rafaelrpinto / VulnerableJavaWebApplication

  View on GitHub
  A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity
  ☆21Jul 3, 2024Updated 2 years ago
• w4iting4 / FindIcmpP

  View on GitHub
  解析netsh抓取的etl文件来定位windows主机上存在ICMP通信的进程与文件的小工具
  ☆31Apr 22, 2022Updated 4 years ago
• leveryd / go-sec-code

  View on GitHub
  Go相关的安全研究
  ☆234Nov 6, 2023Updated 2 years ago