Stars
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
Decompiler from Java bytecode to Java, used in IntelliJ IDEA.
Simple to use root checking Android library and sample app
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。
SEKIRO is a multi-language, distributed, network topology-independent service publishing platform. By writing handlers in their respective languages, functionalities can be published to the central…
🔓 Disable SSL verification and pinning on Android, system-wide
ysoserial修改版,着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。
Because just a dark theme wasn't enough!
Log4j jndi injects the Payload generator
A collection of reverse engineering challenges for learning about the Android operating system and mobile security.
Vulnerable Java based Web Application