Repository Index

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

• java
• deserialization
• gadget
• exploit

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

• security-audit
• build-tool
• maven-plugin
• jenkins-plugin

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

• springboot
• springboot-actuator-rce
• rce
• spring-boot-vulnerability

LWJGL is a Java library that enables cross-platform access to popular native APIs useful in the development of graphics (OpenGL, Vulkan, bgfx), audio (OpenAL, Opus), parallel computing (OpenCL, CUDA) and XR (OpenVR, LibOVR, OpenXR) applications.

• lwjgl
• kotlin
• opengl
• opencl

TranslatedA knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

• poc

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

• owasp
• appsec
• security
• bom

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

Java web common vulnerabilities and security code which is base on springboot and spring security

• java
• code
• security
• xxe

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

• ai
• burp-extensions
• burpsuite
• cybersecurity

Vulkan renderer mod for Minecraft.

• minecraft
• vulkan
• minecraft-mod
• vulkan-renderer

Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等

• java-asm
• java-decompiler
• static-analysis
• vulnerability

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

• pentest
• vulnerability

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

DIVA Android - Damn Insecure and vulnerable App for Android

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Oversecured Vulnerable Android App

• appsec
• android-security
• vulnerable-application
• vulnerable-android-apps

Unofficial Android port of the SpektraLab film & paper simulation engine (Vulkan): RAW in, physically modelled film out, on the phone.

• android
• film-simulation
• photography
• raw

Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code

• android-application
• webview-xss
• application-security
• vulnerable-application

A vulnerability patch gathering tool