# phith0n/JavaThings

Share Things Related to Java - Java安全漫谈笔记相关内容

Repository: https://github.com/phith0n/JavaThings
Canonical: https://ross.abutalabs.com/products/javathings
Language: Java
License Family: other
Topics: java, security
Last push: 2025-04-09T12:02:08+00:00

## Health v2 (maintenance only)
Score: 39/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 15, release rhythm 35, longevity 100
- inputs: {"age_days": 2235, "days_push": 511, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2028, forks 227 (observed 2026-08-28T04:06:07.038438+00:00)

## What it is
A collection of study notes and demo code accompanying the 'Java Security Ramblings' (Java安全漫谈) essay series by phith0n. It covers Java security fundamentals such as reflection, RMI, bytecode loading, and deserialization gadget chains like CommonsCollections, CommonsBeanutils, and JDK7u21.

## Use cases
- learn java deserialization vulnerabilities
- understand commonscollections gadget chains
- study java reflection for security
- learn how rmi attacks work
- find poc examples for java deserialization
- learn bytecode loading techniques in java
- study shiro deserialization exploitation

## When to choose
- you are learning Java security from scratch with guided notes
- you want runnable demo code for deserialization gadget chains
- you want a structured curriculum covering reflection, RMI, and bytecode loading

## When to avoid
- you need a production-ready exploitation tool rather than educational demos
- you need a maintained security library with a license for commercial use
- you are not working with the JVM or Java security

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, developer-tools, serialization
- domain: security, tutorials
- platform: jvm, cross-platform
- tags: java-security, deserialization, gadget-chains, rmi, study-notes, penetration-testing-education

## Member repositories
- phith0n/JavaThings (main) score 39

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:07.038438+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:59:40.436595+00:00, confidence not recorded.
  - readme: https://github.com/phith0n/JavaThings (fetched 2026-08-28T04:06:07.038438+00:00, sha 744cb663a6bc)
- Data as of 2026-08-30T08:39:29.467469+00:00.