代码审计总结
☆85Sep 1, 2021Updated 4 years ago
Alternatives and similar repositories for CodeReview
Users that are interested in CodeReview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆118Dec 30, 2021Updated 4 years ago
- Java代码审计案例☆23May 16, 2021Updated 5 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆148Sep 16, 2021Updated 4 years ago
- java反序列化漏洞笔记☆24Apr 6, 2019Updated 7 years ago
- 结合反射调用、动态编译、BCEL、defineClass0,ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具☆19Dec 16, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Java漏洞靶场☆385Dec 25, 2023Updated 2 years ago
- java 代码审计学习靶场☆120Jan 11, 2024Updated 2 years ago
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- 给woodpecker框架量身定制的ysoserial☆632Oct 26, 2022Updated 3 years ago
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 5 years ago
- java☆54Jan 12, 2023Updated 3 years ago
- 收集内存马打入方式☆508May 20, 2022Updated 4 years ago
- 关于学习java安全的一些知识,正在学习中ing,欢迎fork and star☆790Jul 11, 2023Updated 3 years ago
- java代码审计学习笔记☆685Feb 24, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- common methods that used by my burp extension projects☆52Apr 12, 2024Updated 2 years ago
- K8S安全攻防思维导图 | Docker安全攻防思维导图☆416Jun 22, 2022Updated 4 years ago
- nuclei模版生成插件☆110Dec 19, 2023Updated 2 years ago
- Java漏洞学习笔记 Deserialization Vulnerability☆942Jun 14, 2023Updated 3 years ago
- 就是一个练习Java反序列化的最简单环境☆15Dec 24, 2021Updated 4 years ago
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- ☆14Jul 22, 2023Updated 3 years ago
- Java安全学习历程☆41Jul 7, 2023Updated 3 years ago
- python 代码审计项目☆299Oct 10, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- JNDI在java高版本的利用工具,FUZZ利用链☆608Updated this week
- Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。☆420Dec 3, 2021Updated 4 years ago
- 利用阿里云oss对象存储,来转发http流量实现(cs)Cobalt Strike、msf 上线等 这之间利用阿里云的相关域名进行通信。☆170Apr 19, 2026Updated 3 months ago
- 项目监控工具 以及 Codeql 自动运行☆310Apr 13, 2023Updated 3 years ago
- A list for Spring Security☆129Jan 16, 2024Updated 2 years ago
- 攻击Java Web应用-[Java Web安全]☆80Dec 8, 2019Updated 6 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆166Apr 10, 2022Updated 4 years ago
- 记录weblogic的一些漏洞原理☆17Nov 4, 2021Updated 4 years ago
- 冰蝎、哥斯拉 jsp webshell通信流 量解密器☆146Apr 18, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一个LDAP请求监听器,摆脱dnslog平台和java☆35Feb 4, 2023Updated 3 years ago
- cve-2020-1472 复现利用及其exp☆111Sep 16, 2020Updated 5 years ago
- 自己学习java安全的一些总结,主要是安全审计相关☆1,704Jan 5, 2022Updated 4 years ago
- Codeql学习笔记☆903Apr 25, 2022Updated 4 years ago
- 一个批量扫描shiro漏洞的工具,支持AES/CMG☆80Jan 18, 2023Updated 3 years ago
- 适用于Cobalt Strike的插件☆559May 30, 2021Updated 5 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆777Jan 26, 2022Updated 4 years ago