Viewing: raw.githubusercontent.com

[ Web Proxy ]
Viewing: https://raw.githubusercontent.com/HackJava/HackJava/main/README.md
# Java-Java

![HackJava](https://socialify.git.ci/HackJava/HackJava/image?description=0&descriptionEditable=%E3%80%8AJava%E5%AE%89%E5%85%A8-%E5%8F%AA%E6%9C%89Java%E5%AE%89%E5%85%A8%E6%89%8D%E8%83%BD%E6%8B%AF%E6%95%91%E5%AE%87%E5%AE%99%E3%80%8B&font=Rokkitt&forks=1&issues=1&name=1&owner=0&pattern=Floating%20Cogs&pulls=1&stargazers=1&theme=Light)

JavaJavaJavaJavaJavaJavaJavaJavaJava[0e0w](https://github.com/0e0w)

202178202384

- [01-Java](https://github.com/HackJava/HackJava#01-java%E5%AE%89%E5%85%A8%E7%A0%94%E7%A9%B6%E8%B5%84%E6%BA%90)
- [02-Java](https://github.com/HackJava/HackJava#02-java%E5%AE%89%E5%85%A8%E7%A0%94%E7%A9%B6%E6%96%B9%E5%90%91)
- [03-Java](https://github.com/HackJava/HackJava#03-java%E5%AE%89%E5%85%A8%E7%A0%94%E7%A9%B6%E5%B7%A5%E5%85%B7)
- [04-Java](https://github.com/HackJava/HackJava#04-java%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E%E7%8E%AF%E5%A2%83)
- [05-Java](https://github.com/HackJava/HackJava#05-java%E5%AE%89%E5%85%A8%E6%BC%8F%E6%B4%9E%E4%BF%AE%E5%A4%8D)
- [06-Java](https://github.com/HackJava/HackJava#06-java%E5%AE%89%E5%85%A8%E9%AB%98%E5%8D%B1%E5%BA%94%E7%94%A8)
- [07-Java](https://github.com/HackJava/HackJava#07-java%E5%AE%89%E5%85%A8%E5%8F%82%E8%80%83%E8%B5%84%E6%BA%90)

## 01-Java

****
- [ ] [Java-](https://item.jd.com/10033832360716.html)@
- [ ] [Java](https://item.jd.com/13466996.html)@
- [ ] [Java](https://book.douban.com/subject/24846041)@
- [ ] [Java]()@
- [ ] [Java]()@
- [ ] [Java](https://www.amazon.co.uk/%E7%BC%96%E5%86%99%E5%AE%89%E5%85%A8%E5%8F%AF%E9%9D%A0%E7%A8%8B%E5%BA%8F%E7%9A%8475%E6%9D%A1%E5%BB%BA%E8%AE%AE%EF%BC%88%E8%8B%B1%E6%96%87%E7%89%88%EF%BC%89-%E5%BE%B7%E9%B2%81%C2%B7%E8%8E%AB%E6%AC%A3%E8%BE%BE%EF%BC%88Dhruv-C-%E8%A5%BF%E7%A7%91%E5%BE%B7%EF%BC%88Robert-F-%E8%90%A8%E7%91%9F%E5%85%B0%EF%BC%88Dean-%E5%BC%97%E9%9B%B7%E5%BE%B7%C2%B7%E6%9C%97%EF%BC%88Fred/dp/B017WGUFKO)@
- [ ] [Java-Web-Security](https://play.google.com/store/books/details/Java_Web_Security_Sichere_Webanwendungen_mit_Java_?id=ZxZ4DwAAQBAJ&hl=en_US&gl=US)@Dominik Schadow

****

- [ ] [Java Web-](https://github.com/javaweb-sec/javaweb-sec)@
- [ ] [Java](https://github.com/phith0n/JavaThings)@phith0n
- [ ] [Java](https://github.com/proudwind/javasec_study)@proudwind
- [ ] [Java](https://github.com/SummerSec/JavaLearnVulnerability)@SummerSec
- [ ] [](https://github.com/cn-panda/JavaCodeAudit)@cn-panda
- [ ] [Java](https://github.com/Maskhe/javasec)@Maskhe
- [ ] [Java Web](https://github.com/March110/javaweb-sec)@
- [ ] [Java RCE ](https://github.com/feihong-cs/Java-Rce-Echo)@feihong
- [ ] [Java](https://github.com/Y4er/WebLogic-Shiro-shell)@Y4er
- [ ] [Java](https://github.com/huyuanzhi2/CodeReview)@huyuanzhi2
- [ ] [-Java](https://github.com/7hang/--Java)@7hang
- [ ] [Java](https://github.com/5huai/POC-Test)@5huai
- [ ] [JavaJava](https://github.com/Firebasky/Java)@Firebasky
- [ ] [Javademo](https://github.com/threedr3am/learnjavabug)@threedr3am
- [ ] [JAVA](https://www.freebuf.com/column/1289)@0neOfU4
- [ ] [JAVA](https://mp.weixin.qq.com/s/oEI1GLJKSoSLxMcAhFFWKQ)@

****

- [ ] [MS08067](https://space.bilibili.com/396298765?spm_id_from=333.788.b_765f7570696e666f.2)@MS08067
- [ ] [Java](https://edu.51cto.com/course/27875.html)@Hack_Man
- [ ] [Java](https://www.learnfuture.com/study/ist126v)@
- [ ] [ JAVA](https://www.cnblogs.com/unicodeSec/p/15062087.html)@
- [ ] [Securing Java Web Applications](https://www.pluralsight.com/courses/java-web-application-security-vulnerabilities)@Josh Cummings
- [ ] https://space.bilibili.com/2142877265

****

****

- [ ] [javaweb](https://patents.google.com/patent/CN103699480B/zh)@

****

- [ ] https://github.com/topics/static-analysis?l=java
- [ ] [Java Web](https://zhishihezi.net/b/5d644b6f81cbc9e40460fe7eea3c7925)@javasec
- [ ] [J2EE ](https://zhishihezi.net/b/98ae566719b21536dff0c4febaa697d2)@
- [ ] [](https://github.com/RangerNJU/Static-Program-Analysis-Book)
- [ ] [Java](https://www.cnblogs.com/r00tuser/p/10577571.html)@r00tuser
- [ ] https://github.com/su18/JDBC-Attack
- [ ] https://xz.aliyun.com/t/7945
- [ ] http://tttang.com/archive/1322
- [ ] https://teamssix.com/211115-165745.html
- [ ] https://teamssix.com/211115-123451.html
- [ ] https://github.com/dean2021/java_security_book
- [ ] https://github.com/yq1ng/Java
- [ ] https://github.com/wa1ki0g/javasec
- [ ] https://github.com/pen4uin/JavaSec
- [ ] https://github.com/javaparser/javaparser
- [ ] https://github.com/safe6Sec/JavaDeserialization
- [ ] https://github.com/ninthDevilHAUNSTER/JavaSecLearning
- [ ] https://github.com/Ghost2097221/javaweb_security_study_notes
- [ ] https://github.com/Cryin/JavaID
- [ ] https://paper.seebug.org/312
- [ ] https://tttang.com/archive/1337
- [ ] https://paper.seebug.org/1766
- [ ] https://github.com/p1n93r/javasec
- [ ] https://github.com/haby0/sec-note
- [ ] https://github.com/woodpecker-appstore/rmi-deserialization-vuldb
- [ ] https://github.com/4ra1n/JavaSecInterview
- [ ] https://github.com/4ra1n/FindShell
- [ ] https://github.com/pen4uin/java-security
- [ ] https://github.com/flowerwind/JspFinder
- [ ] https://github.com/TonyD0g/JavaHacker
- [ ] https://github.com/qtc-de/remote-method-guesser
- [ ] https://github.com/fynch3r/Gadgets
- [ ] https://tttang.com/archive/1405
- [ ] https://github.com/eugenp/tutorials
- [ ] https://github.com/Adrninistrator/java-all-call-graph
- [ ] https://github.com/KeenSecurityLab/BinAbsInspector
- [ ] https://github.com/R17a-17/JavaVulnSummary
- [ ] [java](https://xz.aliyun.com/t/11966)
- [ ] [ Java ](https://github.com/Drun1baby/JavaSecurityLearning)
- [ ] https://github.com/Er1cccc/ACAF
- [ ] https://github.com/cri1wa/MemShell
- [ ] https://github.com/Y4tacker/JavaSec
- [ ] https://xz.aliyun.com/t/12649
- [ ] https://xz.aliyun.com/t/12669

## 02-Java

**Web**
- [ ] 
- [ ] 
- [ ] 
- [ ] 
- [ ] 
- [ ] Java
- [ ] SQL
- [ ] 
- [ ] 
- [ ] 
- [ ] XSS
- [ ] XXE
- [ ] SSRF
- [ ] CSRF

**Java**
- [ ] https://github.com/ax1sX/SecurityList

**Java**
- [ ] https://github.com/Getshell/Mshell

## 03-Java

Java

**SAST**
- [ ] https://github.com/ASTTeam/SAST
- [ ] https://github.com/wooyunwang/Fortify
- [ ] https://github.com/FeeiCN/Cobra
- [ ] https://github.com/LoRexxar/Kunlun-M
- [ ] https://checkstyle.sourceforge.io
- [ ] https://github.com/j5s/XVulnFinder
- [ ] https://github.com/SummerSec/SPATool
- [ ] https://github.com/noidsirius/SootTutorial
- [ ] [Tencent Xcheck](https://cloud.tencent.com/product/asd)

**DAST**
- [ ] https://github.com/ASTTeam/DAST

**IAST**
- [ ] https://github.com/ASTTeam/IAST
- [ ] https://github.com/HXSecurity/DongTai

**CodeQL**
- [ ] https://github.com/ASTTeam/CodeQL

**RASP**
- [ ] https://github.com/0e0w/RASP

**JNDI**

- [ ] https://github.com/HackJava/JNDI
- [ ] https://github.com/bradfitz/jndi
- [ ] https://github.com/EmYiQing/LDAPKit
- [ ] https://github.com/su18/JNDI
- [ ] https://github.com/welk1n/JNDI-Injection-Exploit
- [ ] https://github.com/feihong-cs/JNDIExploit
- [ ] https://github.com/0x727/JNDIExploit
- [ ] https://github.com/veracode-research/rogue-jndi
- [ ] https://github.com/quentinhardy/jndiat
- [ ] https://github.com/p1n93r/AttackJNDI
- [ ] https://github.com/Jeromeyoung/JNDIExploit-1
- [ ] https://github.com/exp1orer/JNDI-Inject-Exploit
- [ ] https://github.com/zu1k/ldap-log
- [ ] https://github.com/orleven/Celestion

**ysoserial**
- [ ] https://github.com/wh1t3p1g/ysomap
- [ ] https://github.com/frohoff/ysoserial
- [ ] https://github.com/KpLi0rn/ysoserial
- [ ] https://github.com/Y4er/ysoserial
- [ ] https://github.com/0range228/Gadgets
- [ ] https://github.com/ikkisoft/SerialKiller
- [ ] https://github.com/5wimming/gadgetinspector
- [ ] https://github.com/threedr3am/gadgetinspector
- [ ] https://github.com/JackOfMostTrades/gadgetinspector
- [ ] https://github.com/Afant1/JavaSearchTools
- [ ] https://github.com/j1anFen/ysoserial_echo
- [ ] https://github.com/EmYiQing/ShortPayload

**Monitor**
- [ ] https://github.com/TheKingOfDuck/FileMonitor
- [ ] https://github.com/TheKingOfDuck/MySQLMonitor
- [ ] https://github.com/Lotus6/FileMonitor

**IDEA**
- [ ] https://github.com/XianYanTechnology/RocB
- [ ] https://github.com/momosecurity/momo-code-sec-inspector-java
- [ ] https://github.com/XmirrorSecurity/OpenSCA-intellij-plugin

**Others**
- [ ] https://github.com/MobSF/mobsfscan
- [ ] https://github.com/threedr3am/log-agent
- [ ] https://github.com/wh1t3p1g/tabby
- [ ] https://github.com/j5s/XVulnFinder
- [ ] https://github.com/EmYiQing/CodeInspector
- [ ] https://github.com/mtxiaowangzi/CAFJE
- [ ] https://github.com/returntocorp/semgrep
- [ ] https://github.com/cqkenuo/LingZhi
- [ ] https://github.com/blinkfox/stalker
- [ ] https://github.com/spotbugs/spotbugs
- [ ] https://github.com/SonarSource/sonarqube
- [ ] https://www.jarchitect.com
- [ ] https://github.com/eclipse/eclemma
- [ ] https://github.com/phith0n/zkar
- [ ] https://github.com/Firebasky/GoRmi
- [ ] https://github.com/LostZX/Kakaka
- [ ] https://github.com/jenkinsci/snyk-security-scanner-plugin
- [ ] https://github.com/secdec/attack-surface-detector-burp
- [ ] https://github.com/0Kee-Team/JavaProbe
- [ ] https://github.com/EmYiQing/SpringInspector
- [ ] https://github.com/whwlsfb/JDumpSpider
- [ ] https://github.com/Ppsoft1991/CodeReviewTools
- [ ] https://github.com/0nise/shell-plus
- [ ] https://github.com/4ra1n/SpringInspector
- [ ] https://github.com/GraxCode/cafecompare
- [ ] https://github.com/siberas/sjet
- [ ] https://github.com/4ra1n/accelerator
- [ ] https://github.com/hluwa/Wallbreaker
- [ ] https://github.com/4ra1n/code-inspector
- [ ] https://github.com/luelueking/ClazzSearcher

## 04-Java

JavaWeb

- [ ] [WebBug-JavaEEWeb](https://github.com/Mysticbinary/WebBug)@mysticbinary
- [ ] [WebGoat-](https://github.com/WebGoat/WebGoat)@WebGoat
- [ ] [JavaSecurity-Java Web](https://github.com/dschadow/JavaSecurity)@dschadow
- [ ] [Java-Web-Security-](https://github.com/dschadow/Java-Web-Security)@dschadow
- [ ] [maobugs-Java CVE](https://github.com/langligelang/maobugs)@langligelang
- [ ] [SecExample-Java](https://github.com/tangxiaofeng7/SecExample)@tangxiaofeng7
- [ ] [java sec code-Java](https://github.com/JoyChou93/java-sec-code)@JoyChou93
- [ ] [dvja- Java EE](https://github.com/appsecco/dvja)@appsecco
- [ ] [JavaVulnerableLab-Java Web](https://github.com/CSPF-Founder/JavaVulnerableLab)@CSPF-Founder
- [ ] [Java_deserialize_vuln_lab-Java](https://github.com/bit4woo/Java_deserialize_vuln_lab)@bit4woo
- [ ] [Java-EE-VulnWebJava Web](https://github.com/mtxiaowangzi/Java-EE-VulnWeb)@mtxiaowangzi
- [ ] [Hello Java Sec-Java](https://github.com/j3ers3/Hello-Java-Sec)@3ers3
- [ ] [javaweb codereview-java](https://github.com/iiiusky/javaweb-codereview)@iiiusky
- [ ] [sqlilab Jsp-jspsqlilab 1-21](https://github.com/yhy0/sqlilab-Jsp)@yhy0
- [ ] [ShiroAndFastJson-shirofastjson](https://github.com/safe6Sec/ShiroAndFastJson)@safe6Sec
- [ ] [RMI  ](https://github.com/lalajun/RMIDeserialize)@lalajun
- [ ] [mytestvul-/](https://github.com/novysodope/mytestvul)@novysodope
- [ ] [JavaVulnerableLab circle-Java](https://github.com/pmiaowu/DeserializationTest)@pmiaowu
- [ ] [Java Web](https://github.com/Zhangyao-zzyy/JavaVulnerableLab-circle)@Zhangyao-zzyy
- [ ] https://github.com/l4yn3/micro_service_seclab
- [ ] https://github.com/GoSecure/goinsecure-deserialization
- [ ] https://gitee.com/cor0ps/java-range
- [ ] https://github.com/c0ny1/xxe-lab
- [ ] https://github.com/shanika04/Kura_XXE
- [ ] https://github.com/t0thkr1s/allsafe
- [ ] https://github.com/oversecured/ovaa
- [ ] https://github.com/jaiswalakshansh/Vuldroid
- [ ] https://github.com/baidu-security/openrasp-testcases
- [ ] https://github.com/cschneider4711/Marathon
- [ ] https://github.com/pmiaowu/RMITest
- [ ] https://github.com/OWASP-Benchmark/BenchmarkJava
- [ ] https://github.com/EmYiQing/CIDemo
- [ ] https://github.com/javaweb-sec/javaweb-vuls
- [ ] https://github.com/LandGrey/SpringBootVulExploit
- [ ] https://github.com/linjiananallnt/ElectricRat

## 05-Java

Java
- [x] [Java](https://developer.aliyun.com/article/175341)@
- [ ] [OWASP ](https://owasp.org/www-pdf-archive/OWASP_SCP_Quick_Reference_Guide_%28Chinese%29.pdf)
- [ ] [-Java](https://github.com/Tencent/secguide/blob/main/Java%E5%AE%89%E5%85%A8%E6%8C%87%E5%8D%97.md)
- [ ] [-Java](https://github.com/momosecurity/rhizobia_J)
- [ ] -Java
- [ ] -Java
- [ ] -Java
- [ ] -Java-Web
- [ ] [securitypaper-Java](https://www.securitypaper.org/2.sdl%E8%A7%84%E8%8C%83%E6%96%87%E6%A1%A3/3-java%E5%AE%89%E5%85%A8%E7%BC%96%E7%A0%81%E8%A7%84%E8%8C%83)

Java

## 06-Java

Java

- [ ] [Log4j2](https://github.com/HackJava/Log4j2)
- [ ] [Shiro](https://github.com/HackJava/Shiro)
- [ ] [Weblogic](https://github.com/HackJava/Weblogic)
- [ ] MyBatis
- [ ] Spring

## 07-Java

JavaJava

- [ ] https://github.com/4ra1n
- [ ] https://github.com/phith0n
- [ ] https://github.com/su18
- [ ] https://github.com/welk1n
- [ ] https://github.com/threedr3am
- [ ] https://github.com/Y4er
- [ ] https://github.com/wh1t3p1g
- [ ] https://xz.aliyun.com/u/44415

## Stargazers

[![Stargazers @HackJava/HackJava](https://reporoster.com/stars/HackJava/HackJava)](https://github.com/HackJava/HackJava/stargazers)

## Forkers

[![Forkers @HackJava/HackJava](https://reporoster.com/forks/HackJava/HackJava)](https://github.com/HackJava/HackJava/network/members)

![](01-Java/TEMP/wx.png)

[![Stargazers over time](https://starchart.cc//HackJava/HackJava.svg)](https://starchart.cc/HackJava/HackJava)
Web Proxy Viewer | New URL | Original Page