java反序列化学习笔记
☆16Nov 17, 2021Updated 4 years ago
Alternatives and similar repositories for JavaDeserialization
Users that are interested in JavaDeserialization are comparing it to the libraries listed below
Sorting:
- 记录weblogic的一些漏洞原理☆16Nov 4, 2021Updated 4 years ago
- 自学时写的适合Java安全小白用来学习Java反序列化漏洞的文章和Demo。(随懒狗的学习进度持续更新🐶)。Some articles and demos written during self-study which are suitable for Java Secu…☆11Dec 22, 2021Updated 4 years ago
- 针对于Spring框架的自动Java代码审计工具☆37Jan 24, 2022Updated 4 years ago
- 从js文件中提取url等并与Xray联动☆19Jan 30, 2023Updated 3 years ago
- 反编译 源代码级别的hook☆37Aug 12, 2022Updated 3 years ago
- Tao(道)一款用于java语言函数调用关系生成的工具,致力于提高java代码审计效率。☆11Jul 2, 2024Updated last year
- Java安全相关,目前主要是CC链研究☆10Sep 1, 2022Updated 3 years ago
- 域渗透脑图中文翻译版☆12Jan 26, 2022Updated 4 years ago
- 编译原理学习代码仓库☆23Jan 17, 2022Updated 4 years ago
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Dec 30, 2021Updated 4 years ago
- There is my vuln POC and EXP. Some of POC were collected, most of POC and EXP were written by myself.☆13May 28, 2022Updated 3 years ago
- A standalone Java Decompiler GUI☆14Nov 14, 2021Updated 4 years ago
- 文件变化实时监控工具Plus版(代码审计/黑盒/白盒审计辅助工具), 基于项目修改 https://github.com/TheKingOfDuck/FileMonitor☆11Jun 28, 2020Updated 5 years ago
- 废物自救项目!一起向光而行!!!☆11May 7, 2022Updated 3 years ago
- 二进制安全学习笔记☆26Jan 8, 2022Updated 4 years ago
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- Apache-backdoor Apache 中间件模块后门☆53Jan 10, 2020Updated 6 years ago
- 这个工具只是临时名称,我称他为端口隧道技术,解决隔离内网上线问题。☆78May 31, 2022Updated 3 years ago
- 自己辅助渗透用的小工具(真心小工具)☆48Sep 3, 2022Updated 3 years ago
- 语雀敏感信息泄露搜索工具☆13Jan 20, 2023Updated 3 years ago
- 可以从公开仓库直接拖取镜像的一个小工具 方便直接解包审计代码☆13Feb 11, 2023Updated 3 years ago
- 杂 物 收 纳☆15Aug 4, 2023Updated 2 years ago
- 当死去的记忆突然开始攻击我,我终于想起了我还写过一款十分十分垃圾的 rasp 靶场。☆87Jul 21, 2022Updated 3 years ago
- 基于BurpShiroPassiveScan修改增加了Xray回显链生成☆56Sep 6, 2022Updated 3 years ago
- 本工具的定位是快速生成Java安全相关的Payload,如内存马、反序列化链、JNDI url、Fastjson等,动态生成相关Payload,并附带相应的文档。☆93Feb 25, 2025Updated last year
- 右键检测图片是否存在Exif漏洞☆31Mar 27, 2023Updated 2 years ago
- BCEL编解码工具☆16Aug 3, 2022Updated 3 years ago
- Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。☆420Dec 3, 2021Updated 4 years ago
- 扫描全球IP地址绕过CDN,寻找域名对应主站IP, 开发中。。。。。目前只实现☆31Aug 25, 2018Updated 7 years ago
- jre8u20 gadget☆34May 23, 2021Updated 4 years ago
- 自己的JNDI 利用工具,添加一些人性化功能☆131Sep 4, 2022Updated 3 years ago
- golang写的批量对目标网站进行截图的小工具,适合目标资产比较多时,快速定位薄弱点。☆33Oct 14, 2022Updated 3 years ago
- 分支出了些问题,无法合并到main,迁移至https://github.com/hktalent/scan4all☆17Dec 18, 2023Updated 2 years ago
- ☆97Nov 2, 2023Updated 2 years ago
- fastjson不出网利用、c3p0☆255Jul 30, 2021Updated 4 years ago
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- 端口转发工具☆13May 13, 2016Updated 9 years ago
- 集成 nuclei 示例☆14Nov 30, 2021Updated 4 years ago
- 自用的nuclei模板☆103Aug 12, 2024Updated last year