Alternatives and similar repositories for tabby-path-finder

Users that are interested in tabby-path-finder are comparing it to the libraries listed below

• tabby-sec / tabby-vul-finder

  View on GitHub
  A vul-finder for loading CPG and automated finding vul-call-chains
  ☆71Jul 22, 2025Updated 6 months ago
• luelueking / Deserial_Sink_With_JDBC

  View on GitHub
  Some ReadObject Sink With JDBC
  ☆243May 8, 2024Updated last year
• woodpecker-appstore / jexpr-encoder-utils

  View on GitHub
  Java表达式语句生成器
  ☆194Oct 9, 2023Updated 2 years ago
• flowerwind / AutoGenerateXalanPayload

  View on GitHub
  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件
  ☆93Jan 17, 2023Updated 3 years ago
• BytecodeDL / ByteCodeDL

  View on GitHub
  A declarative static analysis tool for jvm bytecode based Datalog like CodeQL
  ☆344Jan 6, 2024Updated 2 years ago
• tabby-sec / tabby

  View on GitHub
  A CAT called tabby ( Code Analysis Tool )
  ☆1,634Jan 17, 2026Updated 3 weeks ago
• kyo-w / router-router

  View on GitHub
  Java web路由内存分析工具
  ☆437May 22, 2025Updated 8 months ago
• tabby-sec / tabby-intellij-plugin

  View on GitHub
  A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily
  ☆39Nov 12, 2024Updated last year
• yzddmr6 / Java-Js-Engine-Payloads

  View on GitHub
  Java Js Engine Payloads All in one
  ☆289Aug 21, 2023Updated 2 years ago
• waderwu / extractor-java

  View on GitHub
  CodeQL extractor for java, which don't need to compile java source
  ☆349Nov 25, 2022Updated 3 years ago
• fdu-sec / JDD

  View on GitHub
  ☆206Oct 27, 2025Updated 3 months ago
• SummerSec / SPATool

  View on GitHub
  静态程序分析工具 主要生成方法的CFG和.java文件的AST
  ☆132Jul 12, 2023Updated 2 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,239Feb 17, 2025Updated 11 months ago
• luelueking / ClazzSearcher

  View on GitHub
  一款使用Yaml定义搜索规则来搜索Class的工具
  ☆108Aug 2, 2023Updated 2 years ago
• LandGrey / spring-boot-upload-file-lead-to-rce-tricks

  View on GitHub
  spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
  ☆753Apr 14, 2021Updated 4 years ago
• Whoopsunix / utf-8-overlong-encoding

  View on GitHub
  抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组
  ☆139Mar 11, 2024Updated last year
• BeichenDream / JDR

  View on GitHub
  ☆146Jan 16, 2023Updated 3 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆822Sep 23, 2022Updated 3 years ago
• datouo / CTF-Java-Gadget

  View on GitHub
  CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段
  ☆276Dec 13, 2024Updated last year
• BytecodeDL / soot-fact-generator

  View on GitHub
  generate facts from bytecode (source is https://github.com/plast-lab/doop-mirror/tree/master/generators)
  ☆23Nov 24, 2024Updated last year
• BeichenDream / Kcon2021Code

  View on GitHub
  ☆274Oct 28, 2021Updated 4 years ago
• BeichenDream / GodzillaMemoryShellProject

  View on GitHub
  ☆306Feb 27, 2025Updated 11 months ago
• jar-analyzer / jar-analyzer-v1-cli

  View on GitHub
  本项目可以把一个或多个Jar包构建成数据库，用户连接数据库后通过SQL语句任意搜索需要的内容，例如类和方法信息，方法调用关系等
  ☆75Oct 11, 2023Updated 2 years ago
• su18 / JDBC-Attack

  View on GitHub
  JDBC Connection URL Attack
  ☆438Sep 10, 2021Updated 4 years ago
• ice-doom / codeql_compile

  View on GitHub
  自动反编译闭源应用，创建codeql数据库
  ☆316Mar 2, 2022Updated 3 years ago
• whocansee / FilelessAgentMemShell

  View on GitHub
  无需文件落地Agent内存马生成器
  ☆248May 30, 2024Updated last year
• phith0n / zkar

  View on GitHub
  ZKar is a Java serialization protocol analysis tool implement in Go.
  ☆643Feb 15, 2025Updated 11 months ago
• 4ra1n / java-gate

  View on GitHub
  Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders
  ☆195Jul 7, 2023Updated 2 years ago
• kezibei / Urldns

  View on GitHub
  ☆341Oct 11, 2025Updated 4 months ago
• Y4er / dotnet-deserialization

  View on GitHub
  dotnet 反序列化学习笔记
  ☆513Oct 19, 2023Updated 2 years ago
• yulate / jdbc-tricks

  View on GitHub
  《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…
  ☆569Feb 7, 2026Updated last week
• 5wimming / gadgetinspector

  View on GitHub
  利用链、漏洞检测工具
  ☆373Jul 31, 2024Updated last year
• c0ny1 / ascii-jar

  View on GitHub
  构造字节在ASCII范围内的jar
  ☆139Feb 14, 2022Updated 4 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms

  View on GitHub
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆310Jun 17, 2022Updated 3 years ago
• Y4er / ysoserial

  View on GitHub
  ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。
  ☆751Jan 11, 2024Updated 2 years ago
• luelueking / jvm-sandbox-rasp

  View on GitHub
  一个基于jvm-sandbox高度定制化rasp
  ☆58Sep 28, 2023Updated 2 years ago
• xiaopan233 / Java_agent_without_file

  View on GitHub
  Java agent without file 无文件的Java agent
  ☆82Apr 7, 2022Updated 3 years ago
• Rvn0xsy / DumperAnalyze

  View on GitHub
  通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩，可以做一些破解、加密验证的绕过等操作
  ☆116Jun 18, 2024Updated last year
• jvm-rasp / jrasp-agent

  View on GitHub
  专注于JVM的运行时防御系统RASP
  ☆295Jun 14, 2024Updated last year