phith0n/JavaThings resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

2028 stars · 227 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of study notes and demo code accompanying the 'Java Security Ramblings' (Java安全漫谈) essay series by phith0n. It covers Java security fundamentals such as reflection, RMI, bytecode loading, and deserialization gadget chains like CommonsCollections, CommonsBeanutils, and JDK7u21.

Use cases

• learn java deserialization vulnerabilities
• understand commonscollections gadget chains
• study java reflection for security
• learn how rmi attacks work
• find poc examples for java deserialization
• learn bytecode loading techniques in java
• study shiro deserialization exploitation

When to choose

• you are learning Java security from scratch with guided notes
• you want runnable demo code for deserialization gadget chains
• you want a structured curriculum covering reflection, RMI, and bytecode loading

When to avoid

• you need a production-ready exploitation tool rather than educational demos
• you need a maintained security library with a license for commercial use
• you are not working with the JVM or Java security

Facets

learning-resource · maturity active

security developer-tools serialization security tutorials jvm cross-platform java-security deserialization gadget-chains rmi study-notes penetration-testing-education

Member repositories

For agents

markdown · JSON · MCP: product_card(name="phith0n/JavaThings")