whwlsfb/JDumpSpider

Health v2 · maintenance only

Adoption not part of the score

1680 stars · 144 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

JDumpSpider is a Java CLI tool that extracts sensitive information (datasource credentials, config properties, Redis configs, Shiro keys, user credentials) from JVM heap dump files. It is aimed at penetration testers analyzing leaked heapdumps from Spring Boot and other Java applications.

Use cases

• extract database credentials from a heapdump file
• analyze leaked spring boot actuator heapdump
• find redis passwords in jvm heap dump
• recover shiro rememberme keys from memory dump
• search heapdump for datasource and config secrets
• pentest tool to parse hprof heap dumps

When to choose

• you have a JVM heap dump and need to pull credentials or secrets from it
• you are doing penetration testing on Java/Spring Boot applications
• you want a ready-made CLI instead of manually browsing heap dumps in MAT

When to avoid

• you need general-purpose heap dump analysis or memory profiling rather than secret extraction
• the target application is not Java/JVM based
• you need a GUI-based memory forensics suite

Facets

cli-tool · maturity active

security penetration-testing parser developer-tools security penetration-testing developer-tools cli cross-platform jvm heapdump jvm memory-forensics secret-extraction spring-boot pentesting java

Member repositories

For agents

markdown · JSON · MCP: product_card(name="whwlsfb/JDumpSpider")