Alternatives and similar repositories for GuanYu

Users that are interested in GuanYu are comparing it to the libraries listed below

• threedr3am / ZhouYu

  View on GitHub
  （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）
  ☆615Dec 29, 2021Updated 4 years ago
• Afant1 / RemoteObjectInvocationHandler

  View on GitHub
  bypass JEP290 RaspHook code
  ☆63Sep 21, 2020Updated 5 years ago
• Draven996 / jniwebshell

  View on GitHub
  ☆42Jul 23, 2019Updated 6 years ago
• iceyhexman / flask_memory_shell

  View on GitHub
  Flask 内存马
  ☆312Mar 26, 2021Updated 4 years ago
• Marcono1234 / codeql-jdk-docker

  View on GitHub
  Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK
  ☆49Jan 7, 2024Updated 2 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆269Mar 4, 2022Updated 3 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆458Mar 24, 2022Updated 3 years ago
• threedr3am / log-agent

  View on GitHub
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆125Jul 17, 2020Updated 5 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆822Sep 23, 2022Updated 3 years ago
• NS-Sp4ce / MoAn_Honey_Pot_Urls

  View on GitHub
  X安蜜罐用的一些存在JSonp劫持的API
  ☆94May 28, 2021Updated 4 years ago
• 0linlin0 / CyberBox

  View on GitHub
  Java Exp FrameWork
  ☆104Apr 23, 2021Updated 4 years ago
• feihong-cs / memShell

  View on GitHub
  FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
  ☆382Nov 6, 2020Updated 5 years ago
• wikiZ / ServerlessScan

  View on GitHub
  云函数扫描器实现代码
  ☆167Apr 11, 2025Updated 10 months ago
• javasec / log4j-patch

  View on GitHub
  log4j-patch 修改字节码实现补丁防御
  ☆20Dec 10, 2021Updated 4 years ago
• feihong-cs / jre8u20_gadget

  View on GitHub
  jre8u20 gadget
  ☆34May 23, 2021Updated 4 years ago
• Ramos-dev / graph4code

  View on GitHub
  超硬核！使用图数据技术发现软件漏洞
  ☆185Sep 1, 2021Updated 4 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• potats0 / javaSerializationTools

  View on GitHub
  ☆143Jan 21, 2021Updated 5 years ago
• woodpecker-appstore / BCELConverter

  View on GitHub
  BCEL class转换插件
  ☆25Apr 5, 2021Updated 4 years ago
• 5wimming / gadgetinspector

  View on GitHub
  利用链、漏洞检测工具
  ☆373Jul 31, 2024Updated last year
• 0Kee-Team / JavaProbe

  View on GitHub
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Apr 26, 2021Updated 4 years ago
• sf197 / GetPwd

  View on GitHub
  用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密
  ☆251Aug 26, 2020Updated 5 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆258Oct 14, 2020Updated 5 years ago
• BeichenDream / ISC2022Code

  View on GitHub
  ☆60May 22, 2023Updated 2 years ago
• bigBestWay / ice

  View on GitHub
  Use java instrument API without JAR file
  ☆47Jun 19, 2022Updated 3 years ago
• dr0op / CrossNet-Beta

  View on GitHub
  红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。
  ☆366Jun 19, 2024Updated last year
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆484Dec 9, 2020Updated 5 years ago
• Y4er / fastjson-bypass-autotype-1.2.68

  View on GitHub
  fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
  ☆229Oct 12, 2022Updated 3 years ago
• threedr3am / FindClassInJars

  View on GitHub
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Mar 25, 2020Updated 5 years ago
• longofo / rmi-jndi-ldap-jrmp-jmx-jms

  View on GitHub
  rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
  ☆310Jun 17, 2022Updated 3 years ago
• bigBestWay / taycan-sdk

  View on GitHub
  use ptrace hook Hotspot JavaVM, instrument java bytecode
  ☆34Sep 28, 2021Updated 4 years ago
• wh1t3p1g / ysomap

  View on GitHub
  A helpful Java Deserialization exploit framework.
  ☆1,239Feb 17, 2025Updated 11 months ago
• rebeyond / memShell

  View on GitHub
  a webshell resides in the memory of java web server
  ☆699Jun 26, 2018Updated 7 years ago
• BeichenDream / InjectJDBC

  View on GitHub
  注入JVM进程 动态获取目标进程连接的数据库
  ☆342Mar 6, 2022Updated 3 years ago
• fynch3r / Gadgets

  View on GitHub
  Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。
  ☆420Dec 3, 2021Updated 4 years ago
• comwrg / ysoserial

  View on GitHub
  ☆46Jan 2, 2022Updated 4 years ago
• idiotc4t / GetSystemEarlyBird

  View on GitHub
  这是一个直接取得系统权限的项目
  ☆48Jun 24, 2020Updated 5 years ago
• Slzdude / behinder_source

  View on GitHub
  Behinder3.0 Beta4 源码（Decompile and Fixed）
  ☆206Sep 1, 2020Updated 5 years ago
• fnmsd / ChunkedHTTPAdapter

  View on GitHub
  参考《利用分块传输吊打所有WAF》修改的requests的Adapter
  ☆98Jan 31, 2019Updated 7 years ago