Ghidra is a software reverse engineering (SRE) framework

Dex to Java decompiler

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

A standalone Java Decompiler GUI

The ZAP by Checkmarx Core project

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

✅ The programmer-friendly testing framework for Java and the JVM

Angry IP Scanner - fast and friendly network scanner

Burp suite 分块传输辅助插件

HackBar plugin for Burpsuite

A tool to dump Java serialization streams in a more human readable form.

Java RMI enumeration and attack tool.

Bypass SSL certificate pinning for most applications

BDD Automated Security Tests for Web Applications

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

forked from frohoff/ysoserial and added my own payloads.