☆19Jun 7, 2023Updated 2 years ago
Alternatives and similar repositories for Java-CVE-Lists
Users that are interested in Java-CVE-Lists are comparing it to the libraries listed below
Sorting:
- FastjsonScan,支持版本识别、出网检测、AutoType检测、依赖检测,poc验证等功能☆13Jun 17, 2025Updated 8 months ago
- My security presentations☆29Aug 21, 2023Updated 2 years ago
- 为了准备 AWD,写了个 Filter 的集合☆87Oct 17, 2024Updated last year
- 如果反序列化过程中使用resolveClass拉黑了TemplatesImpl如何绕过☆53Sep 10, 2023Updated 2 years ago
- 一些总结出来的gadget的flow,后续合适和加入新的flow☆66Dec 6, 2025Updated 2 months ago
- anonymous to cluster-admin via Heapdump.☆30Nov 16, 2023Updated 2 years ago
- A malicious LDAP server for JNDI injection attacks☆52Apr 29, 2023Updated 2 years ago
- ☆146Jan 16, 2023Updated 3 years ago
- 自学时写的适合Java安全小白用来学习Java反序列化漏洞的文章和Demo。(随懒狗的学习进度持续更新🐶)。Some articles and demos written during self-study which are suitable for Java Secu…☆11Dec 22, 2021Updated 4 years ago
- JavaSec☆43Mar 18, 2024Updated last year
- Tai-e的Web插件☆23Jun 11, 2024Updated last year
- ☆24Jun 12, 2023Updated 2 years ago
- 2023白帽补天大会部分代码☆129Dec 26, 2023Updated 2 years ago
- POC for Spring Kafka Deserialization Vulnerability CVE-2023-34040☆46Oct 8, 2025Updated 4 months ago
- A list for Web Security and Code Audit☆1,212Dec 3, 2024Updated last year
- java-web 自动化鉴权绕过☆375Apr 3, 2025Updated 10 months ago
- Java web路由内存分析工具☆437May 22, 2025Updated 9 months ago
- Using Deep Learning To Implement Domain Generation Algorithm.☆22Jan 11, 2022Updated 4 years ago
- Java Js Engine Payloads All in one☆289Aug 21, 2023Updated 2 years ago
- ☆11Feb 2, 2025Updated last year
- 详细的记录了一些Docker漏洞的原理、环境搭建、漏洞复现☆25Nov 22, 2022Updated 3 years ago
- ☆30Aug 30, 2022Updated 3 years ago
- Java命令行文件监控小工具(代码审计)☆103Nov 29, 2021Updated 4 years ago
- 项目监控工具 以及 Codeql 自动运行☆313Apr 13, 2023Updated 2 years ago
- Django QuerySet.annotate(), aggregate(), extra() SQL 注入☆25May 31, 2022Updated 3 years ago
- 80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background serv…☆866Jun 24, 2024Updated last year
- 不那么一样的 Java Agent 内存马☆289Nov 27, 2023Updated 2 years ago
- ☆29Feb 2, 2024Updated 2 years ago
- A benchmark to evaluate taint analysis☆27Jun 20, 2022Updated 3 years ago
- Apache Dubbo漏洞测试Demo及其POC☆65Mar 27, 2023Updated 2 years ago
- javaweb-codereview☆30Jan 22, 2019Updated 7 years ago
- 收集内存马打入方式☆506May 20, 2022Updated 3 years ago
- 公开漏洞知识库整合:https://mrwq.github.io/vulnerability-wiki/#/☆134Jan 7, 2025Updated last year
- PoC of Apache Dubbo CVE-2023-23638☆34Jan 29, 2024Updated 2 years ago
- All challenges from DiceCTF @ HOPE 2022☆28Jul 25, 2022Updated 3 years ago
- Kubernetes has its “ADCS” -- How To Backdoor a Kubernetes in silence and more persistent?☆40Nov 16, 2025Updated 3 months ago
- ☆29Mar 29, 2023Updated 2 years ago
- 基于Agent技术实现的Java内存 马查杀、防护工具。☆94Jul 25, 2024Updated last year
- 使用 agent 实现反序列化 utf8 overlong☆83Apr 24, 2024Updated last year