一个 Java 漏洞利用综合生成平台 | The web version of Java Payload generation and utilization tool provides Payload generation such as Java deserialization and Hessian 1/2 deserialization, as well as JNDI, Fake MySQL, JRMPListener, etc
active 2025-02-27 → 2026-08-08 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 528 days from 2025-02-27 to 2026-08-08. Pushes: 18 total, peak 5 in a day. Pull requests: 0 total, peak 0 in a day. Issues: 28 total, peak 5 in a day. Comments: 28 total, peak 5 in a day. Stars: 406 total, peak 9 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| Ar3h | 48 | 18 | 0 | 16 |
| ViCrack | 4 | 0 | 0 | 1 |
| zegbton | 2 | 0 | 0 | 2 |
| passwa11 | 2 | 0 | 0 | 1 |
| unam4 | 2 | 0 | 0 | 2 |
| dawdwdasawdgsAWDW | 1 | 0 | 0 | 0 |
| 7ten7 | 1 | 0 | 0 | 0 |
| burpheart | 1 | 0 | 0 | 0 |
| ander1023 | 1 | 0 | 0 | 1 |
| baka-maxy | 1 | 0 | 0 | 1 |
| GitttttBottttt | 1 | 0 | 0 | 0 |
| DongHuangT1 | 1 | 0 | 0 | 0 |
| Potatowo233 | 1 | 0 | 0 | 0 |
| Catherines77 | 1 | 0 | 0 | 0 |
| ruisika | 1 | 0 | 0 | 1 |
| yuxianzi | 1 | 0 | 0 | 0 |
| tomsux | 1 | 0 | 0 | 0 |
| xcxmiku | 1 | 0 | 0 | 1 |
| 1diot9 | 1 | 0 | 0 | 0 |
| Ckmount | 1 | 0 | 0 | 1 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#41Ar3h2026-08-07 19:04SpringBeansFastjson生成报错
- Issue#11Ar3h2026-04-09 05:50设置同名 Gadget 参数时存在冲突
- Releasegithub-actions[bot]2026-04-03 04:32Nightly Build (2026-04-03)
- Issue#43GitttttBottttt2026-02-05 05:391.4.4版本MemShellParty生成内存马时候字节码版本配置失效
- Issue#41Ar3h2026-01-17 10:05SpringBeansFastjson生成报错
- Issue#41ViCrack2026-01-16 06:37SpringBeansFastjson生成报错
- Issue#40DongHuangT12026-01-08 13:50加载chains-config问题
- Issue#397ten72026-01-07 10:11反馈两个Payload生成的BUG
- Issue#35Ar3h2026-01-06 08:10XZ上的Hessian Groovy新链
- Issue comment#35Ar3h2026-01-06 08:10XZ上的Hessian Groovy新链
- Issue#36Ar3h2026-01-06 07:54DNSLogAndHttp不支持低版本jdk
- Issue comment#36Ar3h2026-01-06 07:54DNSLogAndHttp不支持低版本jdk
- Issue#31Ar3h2026-01-06 07:53Hessian2Payload jdk原生链1 Windows环境可写入文件，但无法读取
- Issue#29Ar3h2026-01-06 07:53SpringLoader字节码加载中base64解码类兼容问题
- Issue comment#28Ar3h2026-01-06 07:53MozillaRhino2 - MozillaRhino3 链生成报错
- Issue comment#32Ar3h2026-01-06 07:53建议：命令执行链增加选项支持自定义执行终端（非固定 /bin/sh、cmd.exe）
- Issue#33Ar3h2026-01-06 07:53cli-chains生成ShiroPayload抛出异常
- Issue comment#37Ar3h2026-01-06 07:52MozillaRhino2、CommonsCollectionsK2/MapMessage 链生成报错
- Issue#37Ar3h2025-12-29 16:46MozillaRhino2、CommonsCollectionsK2/MapMessage 链生成报错
- Issue#30Ar3h2025-12-10 13:59长字符串未进行 utf8 overlong 混淆 bug
- Issue#33Ar3h2025-12-10 11:57cli-chains生成ShiroPayload抛出异常
- Issue#32ViCrack2025-12-06 11:53建议：命令执行链增加选项支持自定义执行终端（非固定 /bin/sh、cmd.exe）
- Issue#29Ar3h2025-12-04 03:27SpringLoader字节码加载中base64解码类兼容问题
- Issue#26Ar3h2025-11-30 06:47BUG 1.4.2版本，JRMP相关payload不生效
- Issue comment#25ViCrack2025-11-29 13:41生成Docbase报错
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 406 stars here means stars gained during the window, not the repo's star count.