Skip to content
View 4ra1n's full-sized avatar
3.2k followers · 234 following
  • Independent Security Researcher
  • Tokyo
  • 08:33 (UTC +09:00)

Organizations

@jar-analyzer @Java-Chains

Block or report 4ra1n

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
4ra1n/README.md

About

I am 4ra1n, an independent security researcher

Currently unaffiliated with any company or organization

我是 4ra1n，独立安全研究员，目前无工作

Discovered many CVEs in important products

My CVE and Acknowledgments: SECURITY.md

发现过很多知名项目的 CVE 漏洞，我获得的 CVE 和致谢信息记录：SECURITY.md

Reported and had multiple RCE vulnerabilities confirmed in well-known products through Bug Bounty and SRC programs

在 Bug Bounty 和 SRC 提交过多个知名产品 RCE 漏洞并确认

I actively leverage AI to assist with vulnerability analysis and code security auditing, improving both efficiency and research productivity

我积极使用 AI 辅助进行漏洞分析和代码安全审计，提升安全研究效率

Pinned Loading

  1. jar-analyzer/jar-analyzer jar-analyzer/jar-analyzer Public

    Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等

    Java 2.1k 201

  2. class-obf class-obf Public

    一个 CLASS 文件混淆工具，支持方法字段参数名引用分析和重命名混淆，支持字符串提取/AES加密运行时解密/整型异或混淆/垃圾代码花指令混淆/错误注解崩溃/特殊字符迷惑用户/反编译器对抗/方法和字段的隐藏等，配置简单，容易上手

    Java 328 27