Java 代码审计-存在风险的函数汇总。方便我们日常代码审计过程中快速定位漏洞点，配合静态代码分析工具做到事半功倍。Java code audit - summary of risky functions. It is convenient for us to quickly locate vulnerability points in the daily code audit process, and cooperate with static code analysis tools to achieve twice the result with half the effort.
☆30Jul 16, 2024Updated 2 years ago
Alternatives and similar repositories for Java_Risky_Functions
Users that are interested in Java_Risky_Functions are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 加密app渗透测试包，用于brida和frida练习hook逆向技术的安卓apk源码。尝试暴破出加密密码并进行登录即可通关。自动加解密。Brida+burpsuite联动（自动加解密APP请求参数）演示视频在我的Bilibili。☆22Mar 27, 2025Updated last year
- 若依4.8.0后台RCE☆27May 21, 2025Updated last year
- 基于前端vue框架的JavaFx图形化GUI漏洞扫描工具，支持一键扫描vue-manage-system系统前端泄露的未授权目录接口漏洞，并且对扫描的暴露目录进行逐一测试和验证，方便渗透人员快速确定未授权接口。还添加了出口IP地址信息本地DNS信息等的查询，方便清楚自身出口…☆282Aug 11, 2023Updated 3 years ago
- Phishing sender是一款针对 钓鱼邮件应急演练所编写的小脚本，实际上是封装了swaks，让人们做演练的时候更加方便快捷。☆16Jun 8, 2022Updated 4 years ago
- 红队命令速查 是由棱角社区(Edge Forum) 整理的关于 Red Team 期间所常使用的一些基础命令。☆64Jul 11, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 全自动化信息收集工具，解放双手。☆194Jan 16, 2024Updated 2 years ago
- A vul-finder for loading CPG and automated finding vul-call-chains☆69Jul 22, 2025Updated last year
- java 代码审计学习靶场☆121Jan 11, 2024Updated 2 years ago
- burp被动插件扫反射xss☆13Nov 29, 2023Updated 2 years ago
- 结合反射调用、动态编译、BCEL、defineClass0，ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具☆19Dec 16, 2021Updated 4 years ago
- Aries is a free and open-source network scanner, support SYN scanning mode.☆32Sep 9, 2023Updated 3 years ago
- 代码审计工具，用于监听mysql日志，支持mysql8.0以上和以下的版本。☆34Nov 11, 2021Updated 4 years ago
- 宏景ehr sql注入的tamper脚本（sqlmap使用）☆35Jun 14, 2023Updated 3 years ago
- 鸿蒙模拟器 root 工具，方便调试。☆36Jun 8, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 调用Windows Api，绕过杀软添加用户☆37Oct 8, 2020Updated 6 years ago
- 自动化资产收集，端口扫描，指纹识别，蜜罐识别，漏洞检测 轻量级神器☆34Dec 26, 2024Updated last year
- AD Pentest Cheatsheet by BlackWasp☆25Oct 10, 2022Updated 4 years ago
- Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。☆315Feb 18, 2025Updated last year
- 白盒审计工具&渗透测试工具：1.输入源码文件物理路径2.输入测试网站地址3.自动爬取源码中的所有文件名以及相对路径4.保存相对路径，制作URL字典5.使用制作的字典，逐一访问测试网站6.得到不要验证cookie的页面，进行进一步审计或测试☆11Oct 31, 2021Updated 4 years ago
- 远程创建任务计划工具☆187Apr 23, 2022Updated 4 years ago
- hey！这里用来存放公众号中使用的代码☆10Jun 21, 2024Updated 2 years ago
- Extract React router info from React based website within browser☆44Mar 29, 2024Updated 2 years ago
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插 件☆376Jun 7, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Java代码审计手册，关注于漏洞挖掘而非利用【持续更新】☆205Nov 21, 2024Updated last year
- ☆16Apr 18, 2022Updated 4 years ago
- 利用oss实现http转发/cobalt strike上线☆370Nov 26, 2022Updated 3 years ago
- ☆22Nov 11, 2022Updated 3 years ago
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆109Jan 8, 2021Updated 5 years ago
- BurpCrypto officially confirms the supported JS library (BurpCrypto官方确认支持的JS库).☆12Sep 21, 2021Updated 5 years ago
- 这是一款图形化的代码审计工具，支持对规则进行增删改查。可协助代码审计人员在日常代审中对于规则的积累。其中配置页面可配置：审计文件后缀、审计路径关键字、禁止审计路径关键字。支持 java php net项目审计。☆123Jan 16, 2025Updated last year
- java代码审计笔记☆23Jun 8, 2024Updated 2 years ago
- uni_app抓包脚本☆39Jul 29, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆13Nov 7, 2023Updated 2 years ago
- 批量IP地址归属地爬取工具，基于javafx开发，图形化界面操作更简单。实现IP地址查询，IP地址批量查询，IP归属地批量查询功能。IP库调用的是IP318.com和纯真IP库，都是较权威的IP查询网站。☆48Jul 31, 2022Updated 4 years ago
- SpringBoot获取被星号脱敏的密码的明文☆58Dec 13, 2021Updated 4 years ago
- A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.☆42May 9, 2024Updated 2 years ago
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- 内存马学习☆173May 29, 2022Updated 4 years ago
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year