whoopsunix/javarce

实战场景较通用的 Java Rce 相关漏洞的利用方式 | Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios

👋 This is Whoopsunix

🔥 I'm a DevOps ATT&DEF, focusing on security issues related to DevOps, most about Java, and transforming the research into security products such as RASP, IAST, DAST, SAST, SCA, SPM, etc. WIKI link

🪜 Repositories

Project	description	State
JavaRce	Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios	🍀 Active Development
PPPYSO	proof-of-concept for generating Java deserialization payload | Proxy MemShell	🍀 Active Development
PPPRASP	JavaRce complements project - use RASP to prevent vulnerabilities	🍀 Active Development
PPPVULNS	Java CVE Vulnerability Environment	🪴 Intermittent Updates
utf-8-overlong-encoding	抽离出 utf-8-overlong-encoding 的序列化逻辑，实现 2 3 字节加密序列化数组	🌲 Completed
nacosScan	nacos api bypass & jwt bypass & get all configs	🌲 Completed

🚩 Status