本项目是用来记录自己在研究 JNDI 安全过程中收集到的优秀内容，包括优秀的工具代码技巧或详细深入分析的漏洞文章等资源。JNDI实乃万恶之源！JNDI - The Root of all Evil。作者：0e0w
本项目创建于2021年12月11日，最近的一次更新时间为2021年12月13日。
- https://mbechler.github.io/2018/11/01/Java-CVE-2018-3149/
- https://mbechler.github.io/2018/01/20/Java-CVE-2018-2633/
- https://xz.aliyun.com/t/7079
- https://kingx.me/Exploit-Java-Deserialization-with-RMI.html
- https://y4er.com/post/use-local-factory-bypass-jdk-to-jndi/
- https://rickgray.me/2016/08/19/jndi-injection-from-theory-to-apply-blackhat-review/
- https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf
- http://blog.topsec.com.cn/java-jndi%E6%B3%A8%E5%85%A5%E7%9F%A5%E8%AF%86%E8%AF%A6%E8%A7%A3/
- https://github.com/bradfitz/jndi
- https://github.com/EmYiQing/LDAPKit
- https://github.com/su18/JNDI
- https://github.com/welk1n/JNDI-Injection-Exploit
- https://github.com/feihong-cs/JNDIExploit
- https://github.com/0x727/JNDIExploit
- https://github.com/veracode-research/rogue-jndi
- https://github.com/quentinhardy/jndiat
- https://github.com/p1n93r/AttackJNDI
- https://github.com/kxcode/JNDI-Exploit-Bypass-Demo
- https://github.com/bradfitz/jndi
- Weblogic
- Jackson
- Log4j
- Spring
- Fastjson
