A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

Java web common vulnerabilities and security code which is base on springboot and spring security

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

A CAT called tabby ( Code Analysis Tool )

JAVA安全SDK及编码规范

IDEA静态代码安全审计及漏洞一键修复插件

Java漏洞靶场

Minimal Demo App for the RCE