JNDIExploit or a ysoserial.

Web漏洞扫描工具XRAY的GUI启动器

纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY 的利用

DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

A Router WiFi key recovery/cracking tool with a twist.

Integrated Security Testing Environment for Web Applications as Burp Extension.

AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innovative extension harnesses the power of AI to automate vulnerability detection, provide intelligent analysis, and assist security professionals in identifying complex security issues.

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.

SpringJWT is a simple project designed to help users understand JWT implementation with Spring Security, including the use of bearer tokens for secure authentication.

ILAY - authorization for Vaadin

Demo of a webapp with flawed security, for training purposes.

Java Security Education Framework (JSEF) 是基于Spring Boot 3.x构建的Web安全实践平台，专为开发者、安全研究员、高校学生及企业培训设计。通过35+种真实业务场景下的安全漏洞实例（含注入攻击、越权访问、敏感信息泄露等核心类型），提供“原理讲解→漏洞复现→代码对比→修复验证”的完整学习闭环，帮助学习者从“理论”到“实战”快速掌握Web安全核心能力。

Add a local REST API to Burp Suite Pro for instant, scriptable control of proxy, scanning, and scope.

A highly-efficient, dynamic, and secure REST API backend for a web forum application. Built with Java and Spring Boot, it supports user registration and authentication, category management, thread creation, post management, and search functionality. The backend is fully dockerized, enabling rapid deployment and scalability in any environment.

Tastyeat is a recipe sharing web application. It is a REST API developed using Java and Spring Framework, where a login system with authentication and authorization using JWT tokens is implemented.

Proof of concept for OWASP ZAP web security vulnerability scanner

A Spring Boot application demonstrating implementation of user registration, email verification, and authentication using Spring Security. This project showcases best practices for securing a web application and managing user accounts.