Pinned Repositories
AgentInject
JavaAgent学习研究项目
AnalyzeTool
快速定位重要代码段
apache-tomcat-8.5.68-src
Tomcat8.5.68源码调试IDEA项目
Artio-Li.github.io
网络安全、Java安全、漏洞分析、代码审计
Attacking_Shiro_with_CVE_2020_2555
awesome-java-security
Java安全☞代码审计/漏洞分析/武器化
awesome-java-security-checklist
awesome-java-security-checklist(关于Java安全方面,Java基础/审计/修复/设计/规范)
bcelkit
BCEL编解码工具
Java-Sec-Learn
Java安全学习笔记
SpringWebflux-MemShell
SpringWebflux通用内存马
h30gyan's Repositories
h30gyan/fastjson_payload
h30gyan/JNDI-Injection-Exploit-Plus
50+ Gadgets(20 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.
h30gyan/Tai-e
An easy-to-learn/use static analysis framework for Java
h30gyan/java-sec-code
Java web common vulnerabilities and security code which is base on springboot and spring security
h30gyan/CodeQL
《深入理解CodeQL》Finding vulnerabilities with CodeQL.
h30gyan/jar-analyzer
A Java GUI Tool for Analyzing Jar
h30gyan/Log4j2-vul
《HackLog4j-永恒之恶龙》致敬全宇宙最无敌的Java日志库!Tribute to the most invincible Java logging library in the universe!
h30gyan/Shiro-vul
《Shiro漏洞研究》
h30gyan/Yi
项目监控工具 以及 Codeql 自动运行
h30gyan/java-object-searcher
h30gyan/GenerateNoHard
本工具的定位是快速生成Java安全相关的Payload,如内存马、反序列化链、JNDI url、Fastjson等,动态生成相关Payload,并附带相应的文档。
h30gyan/JAVAExploitStudy
java安全,漏洞分析
h30gyan/fastjson-bypass-autotype-1.2.68
fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.
h30gyan/ShiroAndFastJson
shiro加fastjson环境
h30gyan/TomcatMemShell
拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马,支持注入CMD内存马和冰蝎内存马
h30gyan/JavaSec--
Java安全 学习记录
h30gyan/javaHookFrameWork
反编译 源代码级别的hook
h30gyan/JvmRaspBypass
h30gyan/java-object-searcher-1
java内存对象搜索辅助工具
h30gyan/find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
h30gyan/BytecodeTool
字节码工具
h30gyan/hack-fastjson-1.2.80
h30gyan/fastjson1.80Vul
fastjson 80 远程代码执行漏洞复现
h30gyan/MYJNDIExploit
自己的JNDI 利用工具,添加一些人性化功能
h30gyan/FastjsonVulns-1.2.80
[fastjson 1.2.80] CVE-2022-25845 aspectj fileread & groovy remote classload
h30gyan/YongyouNC-Unserialize-Tools
用友NC反序列化漏洞payload生成
h30gyan/cfr
This is the public repository for the CFR Java decompiler
h30gyan/study_summary
study_summary
h30gyan/bcelkit
BCEL编解码工具
h30gyan/JavaSecurity
Java安全相关