luelueking / ClazzSearcher
一款使用Yaml定义搜索规则来搜索Class的工具
☆105Updated last year
Alternatives and similar repositories for ClazzSearcher:
Users that are interested in ClazzSearcher are comparing it to the libraries listed below
- Bypass JVM Class ByteCode Verifier , 对抗反编译器☆111Updated last year
- ☆137Updated 2 years ago
- 抽离出 utf-8-overlong-encoding 的序列化逻辑,实现 2 3 字节加密序列化数组☆118Updated 10 months ago
- 本项目可以把一个或多个Jar包构建成数据库,用户连接数据库后通过SQL语句任意搜索需要的内容,例如类和方法信息,方法调用关系等☆76Updated last year
- JDBC Attack Tricks☆137Updated last year
- 检测查杀java内存马☆75Updated last year
- 不那么一样的 Java Agent 内存马☆260Updated last year
- A vul-finder for loading CPG and automated finding vul-call-chains☆37Updated 3 months ago
- 2023白帽补天大会部分代码☆120Updated last year
- 一个 CLASS 文件混淆工具,支持方法名/字段名/参数名引用分析和重命名混淆方式,支持字符串提取/AES加密运行时解密/整型异或混淆/垃圾代码花指令混淆/等方式,支持方法和字段的隐藏,配置简单,容易上手☆183Updated 2 weeks ago
- Java表达式语句生成器☆185Updated last year
- CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!☆80Updated 2 months ago
- ☆65Updated last year
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆49Updated last year
- Java漏洞调试分析集合☆81Updated 10 months ago
- ☆21Updated 2 years ago
- 用java实现构造openwire协议,利用activeMQ < 5.18.3 RCE 回显利用 内存马注入☆262Updated last year
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆181Updated 7 months ago
- 之前方便自己研究RASP原理和绕过时顺手写的,用于快速启动和重置RASP环境☆54Updated 3 months ago
- A Java Route Collection Tool☆89Updated 5 months ago
- Spel-research☆26Updated 2 years ago
- 基于污点分析和模拟栈帧技术的JSP Webshell检测☆45Updated 3 weeks ago
- 一个基于jvm-sandbox高度定制化rasp☆51Updated last year
- 使用 agent 实现反序列化 utf8 overlong☆70Updated 8 months ago
- ☆55Updated last year
- Lessons for syntaxflow zero to hero☆47Updated 4 months ago
- 多组件客户端☆73Updated 4 months ago
- A list for Spring Security☆119Updated last year
- dubbo快速利用exp,基本上老版本覆盖100%。☆104Updated last year
- fastjson 80 远程代码执行漏洞复现☆189Updated 2 years ago