H4cking2theGate

ysogate

Java反序列化/JNDI注入/恶意类生成工具，支持多种高版本bypass，支持回显/内存马等多种扩展利用。

Frchannel

JarPatcher

A patch framework for jar based on javassist.

H4cking2theGate

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

ambari-in-docker

ambari in docker

gym

order

My-CTF-Challenges

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

remote-method-guesser

Java RMI Vulnerability Scanner

RiddleJoker

suo5

A high-performance http proxy tunneling tool

TraversalHunter

Scanner for PathTraversal Vul.

WatchCat

ARP

Beijing_Daxuexi_Simple

北京 青年大学习 使用Github Actions自动完成

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

CTF

关于我在CTF中的所有东西

dotaxctf

google-ctf

Google CTF

HowlingCelestial

☁️原生安全检测工具-啸天

JavaSec

a rep for documenting my study, may be from 0 to 0.1

JavaThings

Share Things Related to Java - Java安全漫谈笔记相关内容

marshalsec

PHP_INCLUDE_TO_SHELL_CHAR_DICT

vita

full-featured source code analyser

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

ysuserial

此项目为su18大佬的仓库镜像，如有问题可发issuse删库

hutool

🍬A set of tools that keep Java sweet.

jOOQ

jOOQ is the best way to write SQL in Java