zifeihan / fridayView external linksLinks
java runtime decompiler (java实时反编译工具)
☆248Dec 28, 2023Updated 2 years ago
Alternatives and similar repositories for friday
Users that are interested in friday are comparing it to the libraries listed below
Sorting:
- java performance tool in idea☆16Apr 1, 2021Updated 4 years ago
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆125Jul 17, 2020Updated 5 years ago
- 超硬核!使用图数据技术发现软件漏洞☆185Sep 1, 2021Updated 4 years ago
- bypass JEP290 RaspHook code☆63Sep 21, 2020Updated 5 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆117Dec 30, 2021Updated 4 years ago
- 通过JavaAgent与Javassist技术对JVM加载的类对象进 行动态插桩,可以做一些破解、加密验证的绕过等操作☆116Jun 18, 2024Updated last year
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆711May 10, 2021Updated 4 years ago
- Flask 内存马☆312Mar 26, 2021Updated 4 years ago
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆753Apr 14, 2021Updated 4 years ago
- rmi、jndi、ldap、jrmp、jmx、jms一些demo测试☆310Jun 17, 2022Updated 3 years ago
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- JRE8u20_RCE_Gadget☆255Jul 1, 2016Updated 9 years ago
- Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…☆696Dec 25, 2023Updated 2 years ago
- Java RCE 回显测试代码☆12Jun 15, 2021Updated 4 years ago
- attackRmi☆258Oct 14, 2020Updated 5 years ago
- fastjson不出网利用、c3p0☆255Jul 30, 2021Updated 4 years ago
- ☆835Jun 7, 2022Updated 3 years ago
- FilterBased/ServletBased in memory shell for Tomcat and some other middlewares☆382Nov 6, 2020Updated 5 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆151Sep 16, 2021Updated 4 years ago
- (周瑜)Java - SpringBoot 持久化 WebShell(不仅仅是SpringBoot,适合任何符合JavaEE规范的服务)☆615Dec 29, 2021Updated 4 years ago
- ZKar is a Java serialization protocol analysis tool implement in Go.☆643Feb 15, 2025Updated last year
- 通过正则搜索、批量反编译特定Jar包中的class名称☆320Dec 9, 2021Updated 4 years ago
- Java应用的一些配置文件字典,来源于公开的字典与平时收集☆321Feb 1, 2024Updated 2 years ago
- java内存对象搜索辅助工具☆822Sep 23, 2022Updated 3 years ago
- fastjson 被动扫描、不出网payload生成☆367Nov 19, 2021Updated 4 years ago
- A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.☆754Dec 2, 2022Updated 3 years ago
- Shiro-550 不依赖CC链利用工具☆451Jun 19, 2024Updated last year
- 清除基于java agent木马☆80Apr 12, 2021Updated 4 years ago
- 实用的针对安卓应用加壳类型判断的小工具,涵盖各大商业、企业壳, 长期保持更新☆165Jan 14, 2021Updated 5 years ago
- 注入JVM进程 动态获取目标进程连接的数据库☆342Mar 6, 2022Updated 3 years ago
- ZipCreater主要应用于跨目录的文件上传漏洞的利用,它能够快速进行压缩包生成。☆187Apr 6, 2022Updated 3 years ago
- ☆274Oct 28, 2021Updated 4 years ago
- ☆232Jan 3, 2022Updated 4 years ago
- Conote 综合安全测试平台社区版。☆375Aug 15, 2024Updated last year
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆269Mar 4, 2022Updated 3 years ago
- Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。☆420Dec 3, 2021Updated 4 years ago
- tomcat使用了自带session同步功能时,不安全的配置(没有使用EncryptInterceptor)导致存在的反序列化漏洞,通过精心构造的数据包, 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484,9484…☆212May 19, 2020Updated 5 years ago
- X安蜜罐用的一些存在JSonp劫持的API☆94May 28, 2021Updated 4 years ago