Y4tacker/JavaSec resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2300 stars · 341 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A personal study repository documenting the author's Java security learning journey, from fundamentals like reflection and dynamic proxies to advanced topics like JNDI injection, deserialization, and memory webshells. It is a collection of informal notes with curated links to authoritative references rather than a structured tutorial.

Use cases

• learn java deserialization vulnerabilities
• study jndi injection attack chains
• understand java reflection and dynamic proxies for exploitation
• prepare for java code audit interviews
• learn how memory webshells work in tomcat
• find java security learning resources and references
• study xxe and fast vulnerabilities

When to choose

• you are learning Java security from scratch and want a curated path with references
• you want Chinese-language notes on Java deserialization and JNDI injection
• you need a study index linking to JVM specs, OWASP cheat sheets, and gadget chain writeups

When to avoid

• you need a structured, polished course with consistent depth
• you want runnable exploit tooling rather than notes and links
• you need production security libraries or scanners

Facets

learning-resource · maturity active

security penetration-testing reverse-engineering developer-tools security penetration-testing tutorials jvm cross-platform java-security deserialization jndi-injection xxe memory-webshell code-audit study-notes vulnerability-analysis

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Y4tacker/JavaSec")