luelueking / ClazzSearcher
一款使用Yaml定义搜索规则来搜索Class的工具
☆103Updated last year
Related projects: ⓘ
- ☆134Updated last year
- Bypass JVM Class ByteCode Verifier , 对抗反编译器☆106Updated 11 months ago
- 本项目可以把一个或多个Jar包构建成数据库， 用户连接数据库后通过SQL语句任意搜索需要的内容，例如类和方法信息，方法调用关系等☆74Updated 11 months ago
- 检测查杀java内存马☆73Updated 9 months ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组☆105Updated 6 months ago
- JDBC Attack Tricks☆134Updated last year
- 基于污点分析和模拟栈帧技术的JSP Webshell检测☆43Updated 4 months ago
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆163Updated 3 months ago
- 用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆252Updated 10 months ago
- 不那么一样的 Java Agent 内存马☆247Updated 9 months ago
- Java表达式语句生成器☆176Updated 11 months ago
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆44Updated last year
- ☆65Updated 11 months ago
- ☆20Updated last year
- A vul-finder for loading CPG and automated finding vul-call-chains☆33Updated last month
- Java Agent memory horse scanner combined with Call Graph modus☆60Updated last year
- A neo4j procedure for tabby☆111Updated 3 months ago
- A Java Route Collection Tool☆75Updated last month
- Java漏洞调试分析集合☆73Updated 6 months ago
- 2023白帽补天大会部分代码☆120Updated 8 months ago
- JDK CVE-2023-21939☆97Updated last year
- Spel-research☆24Updated 2 years ago
- 多组件客户端☆66Updated last week
- 一个基于jvm-sandbox高度定制化rasp☆48Updated 11 months ago
- A list for Spring Security☆117Updated 8 months ago
- A Go library for generating Java deserialization payloads.☆156Updated last week
- JavaPassDump☆213Updated 2 years ago
- simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。☆5Updated last month
- fastjson 80 远程代码执行漏洞复现☆178Updated 2 years ago
- 当死去的记忆突然开始攻击我，我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆78Updated 2 years ago