The ZAP by Checkmarx Core project

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Java bytecode engineering toolkit

A free utility to help web developers watch and manipulate network traffic from their AJAX applications.

xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".

Look-Ahead Java Deserialization Library

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

NOTICE: this project has been forked and is being maintained at https://github.com/lightbody/browsermob-proxy

A Tool to Annotate and Prioritize Exome Variants

Develop Burp extensions in Jython

Custom security ruleset for the popular Java static analysis tool PMD.

A graphical user interface for the medusa brute forcing utility. http://wiki.taksmind.com//index.php?title=Medusa-gui

Policy Instantiation and Enforcement (PIE)

微信、QQ自动抢红包外挂（绿色、无广告）

Fun with Java abstract syntax trees

Project setup for traversing Java code with Eclipse JDT