b1ackc4t
Follow
Lists (24)
android
cmd
exp_db
info_collect
java_exp
java安全学习
js
learn
poc/漏洞库
ssrf
webshell
内网
密码学
应急响应
弱口令
抓包
文件上传
日常好用工具
权限提升
漏洞扫描
爆破
程序分析
1逆向
靶场
Stars
Official source of container configurations, images, and examples for Oracle products and projects
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
More than 2.66 million lines of code modification continuously iterated for 9 years to modernize java cms, easily supporting tens of millions of data, tens of millions of PV; Support static, server…
T.J. Watson Libraries for Analysis, with frontends for Java, Android, and JavaScript, and may common static program analyses
kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略
JAVA 漏洞靶场 (Vulnerability Environment For Java)
JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……
通过 JAVA AGENT 查杀内存马，提供简易方便的 GUI 界面，一键反编译目标环境内存马进行分析，支持远程查杀和本地查杀（注意：仅供本地复现分析学习，请勿用于正式和生产环境）
Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.
An easy-to-learn/use static analysis framework for Java
Tai-e assignments for static program analysis
🔥 Java enterprise application development framework for full scenario: Restrained, Efficient, Open, Ecologicalll!!! 300% higher concurrency 50% memory savings Startup is 10 times faster. Packing 90…
JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring
Sign-Sacker(签名掠夺者)：一款数字签名复制器，可将其他官方exe中数字签名，图标，详细信息复制到没有签名的exe中，作为免杀，权限维持，伪装的一种小手段。
Obfusheader.h is a portable header file for C++14 compile-time obfuscation.