JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps v…

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

forked from frohoff/ysoserial and added my own payloads.

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

A malicious LDAP server for JNDI injection attacks

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Exploitation toolkit for RichFaces