Free and Open Source, Distributed, RESTful Search Engine

Jenkins automation server

Ip2region is an offline IP-to-Region localization library and IP data management framework with both IPv4 and IPv6 supports, 10-microsecond level query efficiency, xdb search client for many progra…

A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.

新一代爬虫平台，以图形化方式定义爬虫流程，不写代码即可完成爬虫。

Spring Security

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

Apache Log4j is a versatile, feature-rich, efficient logging API and backend for Java.

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

Java web common vulnerabilities and security code which is base on springboot and spring security

Cknife

a rep for documenting my study, may be from 0 to 0.1

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

Burp suite 分块传输辅助插件

Share Things Related to Java - Java安全漫谈笔记相关内容

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

高危漏洞利用工具

jSQL Injection is a Java application for automatic SQL database injection.

☕️ Java Security，安全编码和代码审计

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

HackBar plugin for Burpsuite

AndroRAT | Remote Administrator Tool for Android OS Hacking

🔓 Disable SSL verification and pinning on Android, system-wide

Burp被动扫描流量转发插件

Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势