A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Combination of TabLayout and CoordinatorLayout./TabLayout和CoordinatorLayout相结合的折叠控件

Spring、SpringMVC、MyBatis、Spring Boot案例

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

Java web common vulnerabilities and security code which is base on springboot and spring security

Cknife

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

ApkToolPlus 是一个 apk 逆向分析工具（a apk analysis tools）。

A helpful Java Deserialization exploit framework.

java内存对象搜索辅助工具

Log4j2 RCE Passive Scanner plugin for BurpSuite

WEB渗透测试数据库

继承ProgressBar实现的两种风格的滚动条，非常容易理解。

JDBC Connection URL Attack

weblogic t3 deserialization rce

Proof of concept for using xmrig mining inside an Android APK

CTF platfrom developed by Jarvis from Phrack Team. 做一个功能最全的CTF平台。

webshell-bypass

Log4j jndi injects the Payload generator