代码审计总结
☆85Sep 1, 2021Updated 5 years ago
Alternatives and similar repositories for CodeReview
Users that are interested in CodeReview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆118Dec 30, 2021Updated 4 years ago
- 收集内存马打入方式☆507May 20, 2022Updated 4 years ago
- java 代码审计学习靶场☆121Jan 11, 2024Updated 2 years ago
- java反序列化漏洞笔记☆24Apr 6, 2019Updated 7 years ago
- 给woodpecker框架量身定制的ysoserial☆632Oct 26, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 关于学习java安全的 一些知识,正在学习中ing,欢迎fork and star☆787Jul 11, 2023Updated 3 years ago
- java代码审计学习笔记☆683Feb 24, 2020Updated 6 years ago
- Java漏洞靶场☆387Dec 25, 2023Updated 2 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆147Sep 16, 2021Updated 5 years ago
- 结合反射调用、动态编译、BCEL、defineClass0,ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具☆19Dec 16, 2021Updated 4 years ago
- Java代码审计案例☆23May 16, 2021Updated 5 years ago
- 腾讯安全沙龙 一 二 三 期PPT集合☆19May 24, 2025Updated last year
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- fastjson不出网利用、c3p0☆257Jul 30, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Java漏洞学习笔记 Deserialization Vulnerability☆942Jun 14, 2023Updated 3 years ago
- 就是一个练习Java反序列化的最简单环境☆15Dec 24, 2021Updated 4 years ago
- Java反序列化漏洞利用链补全计划,仅用于个人归纳总结。☆420Dec 3, 2021Updated 4 years ago
- ☆14Jul 22, 2023Updated 3 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆775Jan 26, 2022Updated 4 years ago
- K8S安全攻防思维导图 | Docker安全攻防思维导图☆415Jun 22, 2022Updated 4 years ago
- python 代码审计项目☆299Oct 10, 2021Updated 5 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆606Aug 5, 2026Updated 2 months ago
- 攻击Java Web应用-[Java Web安全]☆79Dec 8, 2019Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Spring Actuator端点的BurpSuite被动扫描插件。☆203Nov 2, 2022Updated 3 years ago
- common methods that used by my burp extension projects☆53Apr 12, 2024Updated 2 years ago
- CodeQL 寻找 JNDI利用 Lookup接口☆166Apr 10, 2022Updated 4 years ago
- ☕️ Java Security,安全编码和代码审计☆1,771Mar 7, 2025Updated last year
- 一个LDAP请求监听器,摆脱dnslog平台和java☆35Feb 4, 2023Updated 3 years ago
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞,一键注册蚁剑filter内存shell☆529Aug 25, 2020Updated 6 years ago
- 参考CS的Bypass插件+分离免杀思想改造☆31Jan 13, 2021Updated 5 years ago
- 记录weblogic的一些漏洞原理☆17Nov 4, 2021Updated 4 years ago
- 自己学习java安全的一些总结,主要是安全审计相关☆1,703Jan 5, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- java☆54Jan 12, 2023Updated 3 years ago
- Java漏洞分析汇合☆142Dec 14, 2021Updated 4 years ago
- 冰蝎、哥斯拉 jsp webshell通信流量解密器☆146Apr 18, 2023Updated 3 years ago
- 《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.☆2,891Aug 4, 2023Updated 3 years ago
- xxl-job未授权命令执行☆116Feb 8, 2022Updated 4 years ago
- Java反序列化漏洞学习☆14Jul 1, 2021Updated 5 years ago
- 一个批量扫描shiro漏洞的工具,支持AES/CMG☆78Jan 18, 2023Updated 3 years ago