代码审计总结
☆86Sep 1, 2021Updated 4 years ago
Alternatives and similar repositories for CodeReview
Users that are interested in CodeReview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆119Dec 30, 2021Updated 4 years ago
- Java代码审计案例☆24May 16, 2021Updated 4 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆151Sep 16, 2021Updated 4 years ago
- java反序列化漏洞笔记☆24Apr 6, 2019Updated 7 years ago
- 结合反射调用、动态编译、BCEL、defineClass0,ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具☆19Dec 16, 2021Updated 4 years ago
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Java漏洞靶场☆382Dec 25, 2023Updated 2 years ago
- java 代码审计学习靶场☆120Jan 11, 2024Updated 2 years ago
- 给woodpecker框架量身定制的ysoserial☆616Oct 26, 2022Updated 3 years ago
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 4 years ago
- 收集内存马打入方式☆508May 20, 2022Updated 3 years ago
- java☆54Jan 12, 2023Updated 3 years ago
- 关于学习java安全的一些知识,正在学习中ing,欢迎fork and star☆792Jul 11, 2023Updated 2 years ago
- java代码 审计学习笔记☆684Feb 24, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- common methods that used by my burp extension projects☆52Apr 12, 2024Updated last year
- 一个用于隐藏C2的、开箱即用的反向代理服务器。 旨在省去繁琐的配置Nginx服务的过程。☆45Dec 18, 2021Updated 4 years ago
- Fastjson + MySQL 条件下不出网利用测试环境☆50Dec 6, 2025Updated 4 months ago
- K8S安全攻防思维导图 | Docker安全攻防思维导图☆418Jun 22, 2022Updated 3 years ago
- nuclei模版生成插件☆110Dec 19, 2023Updated 2 years ago
- 就是一个练习Java反序列化的最简单环境☆15Dec 24, 2021Updated 4 years ago
- Java漏洞分析汇合☆143Dec 14, 2021Updated 4 years ago
- Java漏洞学习笔记 Deserialization Vulnerability☆946Jun 14, 2023Updated 2 years ago
- Java安全学习历程☆42Jul 7, 2023Updated 2 years ago
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- python 代码审计项目☆300Oct 10, 2021Updated 4 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆599Oct 8, 2022Updated 3 years ago
- ☆14Jul 22, 2023Updated 2 years ago
- Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。☆420Dec 3, 2021Updated 4 years ago
- A list for Spring Security☆128Jan 16, 2024Updated 2 years ago
- 利用阿里云oss对象存储,来转发http流量实现(cs)Cobalt Strike、msf 上线等 这之间利用阿里云的相关域名进行通信。☆169Jan 12, 2023Updated 3 years ago
- 项目监控工具 以及 Codeql 自动运行☆314Apr 13, 2023Updated 2 years ago
- 攻击Java Web应用-[Java Web安全]☆81Dec 8, 2019Updated 6 years ago
- 冰蝎、哥斯拉 jsp webshell通信流量解密器☆146Apr 18, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- 记录weblogic的一些漏洞原理☆17Nov 4, 2021Updated 4 years ago
- 一个LDAP请求监听器,摆脱dnslog平台和java☆35Feb 4, 2023Updated 3 years ago
- cve-2020-1472 复现利用及其exp☆113Sep 16, 2020Updated 5 years ago
- 自己学习java安全的一些总结,主要是安全审计相关☆1,701Jan 5, 2022Updated 4 years ago
- 适用于Cobalt Strike的插件☆563May 30, 2021Updated 4 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆775Jan 26, 2022Updated 4 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆103Aug 15, 2023Updated 2 years ago