Maskhe/javasec resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1704 stars · 213 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Chinese-language collection of study notes and tutorials on Java security and code auditing, covering topics like reflection, deserialization vulnerabilities, JNDI injection, RMI attacks, XXE, and JVM fundamentals. It is organized as a series of markdown articles with real-world CVE case studies such as fast, Weblogic, and Apache Dubbo vulnerabilities.

Use cases

• learn java security auditing from scratch
• understand java deserialization vulnerabilities and pop gadget chains
• study how fast and weblogic cves work
• learn jndi injection and rmi attack techniques
• understand xxe vulnerabilities and defenses in java xml parsers
• review jvm internals like class loading and bytecode for security research
• find a structured java security learning roadmap

When to choose

• you want concise, beginner-friendly explanations of java security concepts
• you are studying for a security auditing or penetration testing role focused on java applications
• you want real-world vulnerability case studies alongside theory

When to avoid

• you need an up-to-date reference covering the latest vulnerabilities, as the last update was in 2022
• you need comprehensive coverage of every topic, since several planned sections like SQL injection and SSRF remain incomplete
• you need English-language material

Facets

learning-resource · maturity maintenance

security documentation developer-tools security tutorials developer-tools programming-languages jvm cross-platform java-security security-audit deserialization vulnerability-analysis jvm jndi-injection xxe rmi chinese-language

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Maskhe/javasec")