It can be either a JNDIExploit or a ysoserial.

Web漏洞扫描工具XRAY的GUI启动器

MySQL Fake Server (纯Java实现，支持GUI版和命令行版，提供Dockerfile，支持多种常见JDBC利用)

DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

A Router WiFi key recovery/cracking tool with a twist.

Integrated Security Testing Environment for Web Applications as Burp Extension.

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.

ILAY - authorization for Vaadin

Demo of a webapp with flawed security, for training purposes.

Tastyeat is a recipe sharing web application. It is a REST API developed using Java and Spring Framework, where a login system with authentication and authorization using JWT tokens is implemented.

Proof of concept for OWASP ZAP web security vulnerability scanner

It includes code to encrypt message into cipher and again decrypt that cipher to original text using pocket AES.

Learning Spring Security

Valid Login and Registration for a user with java web security.

Java Spring Boot Backend who implements multiple Authentication Ways.

training project

CS5331 Server-Side Template Injection Project