Lists (1)
Sort Name ascending (A-Z)
Starred repositories
Ghidra is a software reverse engineering (SRE) framework
😱 从源码层面,剖析挖掘互联网行业主流技术的底层实现原理,为广大开发者 “提升技术深度” 提供便利。目前开放 Spring 全家桶,Mybatis、Netty、Dubbo 框架,及 Redis、Tomcat 中间件等
GraalVM compiles Java applications into native executables that start instantly, scale fast, and use fewer compute resources 🚀
ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
【Java工程师面试复习指南】本仓库涵盖大部分Java程序员所需要掌握的核心知识,整合了互联网上的很多优质Java技术文章,力求打造为最完整最实用的Java开发者学习指南,如果对你有帮助,给个star告诉我吧,谢谢!
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
Algorithms and Data Structures implemented in Java
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)
A graph database that supports more than 100+ billion data, high performance and scalability (Include OLTP Engine & REST-API & Backends)
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Java web common vulnerabilities and security code which is base on springboot and spring security
Apache TinkerPop - a graph computing framework
A Graph Traversal Language (no longer active - see Apache TinkerPop)
An easy-to-learn/use static analysis framework for Java
PySonar2: a semantic indexer for Python with interprocedual type inference
Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
Tai-e assignments for static program analysis
FlowDroid Static Data Flow Tracker
A GeekTime course about constructing a compiler.