Ghidra is a software reverse engineering (SRE) framework

Dex to Java decompiler

Android and Java bytecode viewer

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

MDUT - Multiple Database Utilization Tools

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

Burp suite 分块传输辅助插件

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

一款基于BurpSuite的被动式shiro检测插件

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules thro…

A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.

☕️ Java Security，安全编码和代码审计

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

OAExploit一款基于产品的一键扫描工具。

Burp被动扫描流量转发插件

Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。

Freenet REference Daemon

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.…

一个用于前端加密Fuzz的Burp Suite插件

通过jsp脚本扫描java web Filter/Servlet型内存马

❄️冰蝎客户端源码-V4.0.6🔞

burp验证码识别接口调用插件

Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)

Log4j2 RCE Passive Scanner plugin for BurpSuite

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.