JNDIExploit or a ysoserial.

Web漏洞扫描工具XRAY的GUI启动器

纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY 的利用

DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers.

A Router WiFi key recovery/cracking tool with a twist.

AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innovative extension harnesses the power of AI to automate vulnerability detection, provide intelligent analysis, and assist security professionals in identifying complex security issues.

Integrated Security Testing Environment for Web Applications as Burp Extension.

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.

SpringJWT is a simple project designed to help users understand JWT implementation with Spring Security, including the use of bearer tokens for secure authentication.

ILAY - authorization for Vaadin

🎯 VISTA — AI-Powered Security Testing Assistant for Burp Suite. Real-time traffic analysis, 12 expert vulnerability templates, 80+ payloads, WAF detection & bypass. Supports OpenAI, Azure, and OpenRouter (FREE). Zero dependencies.

Demo of a webapp with flawed security, for training purposes.

Add a local REST API to Burp Suite Pro for instant, scriptable control of proxy, scanning, and scope.

A highly-efficient, dynamic, and secure REST API backend for a web forum application. Built with Java and Spring Boot, it supports user registration and authentication, category management, thread creation, post management, and search functionality. The backend is fully dockerized, enabling rapid deployment and scalability in any environment.

Java secure file upload system with JSP, Servlets & MySQL. Security: BCrypt hashing, CSRF/XSS/SQLi protection, file validation (whitelist, MIME, size), session management, shareable links with expiration/passwords. Files stored outside webroot, servlet-controlled access. Demonstrates defense-in-depth preventing unsafe data sharing vulnerabilities.

A Spring Boot application demonstrating implementation of user registration, email verification, and authentication using Spring Security. This project showcases best practices for securing a web application and managing user accounts.

Proof of concept for OWASP ZAP web security vulnerability scanner

Tastyhub is a recipe sharing web application. It is a REST API developed using Java and Spring Framework, where a login system with authentication and authorization using JWT tokens is implemented.