Tom4t0

Tom4t0's Stars

• fiddyschmitt/File-Tunnel

  Tunnel TCP connections through a file

  Language:C#57236

• lijiejie/BBScan

  A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers

  Language:Python2.1k575

• 0x727/FingerprintHub

  侦查守卫(ObserverWard)的指纹库

  920172

• alipay/ant-application-security-testing-benchmark

  xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".

  Language:Java27034

• Ridter/atexec-pro

  Fileless atexec, no more need for port 445

  Language:Python24739

• cncf/tag-security

  🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

  Language:HTML2k496

• h4wkst3r/SCMKit

  Source Code Management Attack Toolkit

  Language:C#20448

• l3yx/jdwp-codeifier

  基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）

  Language:Python19417

• Sysinternals/ProcDump-for-Linux

  A Linux version of the ProcDump Sysinternals tool

  Language:C2.9k301

• Ridter/RelayX

  NTLM relay test.

  Language:Python18126

• pascal-lab/Tai-e-assignments

  Tai-e assignments for static program analysis

  Language:Java1k231

• Clouditera/SecGPT

  SecGPT网络安全大模型

  Language:Python1.5k203

• google/sanitizers

  AddressSanitizer, ThreadSanitizer, MemorySanitizer

  Language:C11k997

• pascal-lab/Tai-e

  An easy-to-learn/use static analysis framework for Java

  Language:Java1.3k166

• krahets/hello-algo

  《Hello 算法》：动画图解、一键运行的数据结构与算法教程。支持 Python, Java, C++, C, C#, JS, Go, Swift, Rust, Ruby, Kotlin, TS, Dart 代码。简体版和繁体版同步更新，English version ongoing

  Language:Java79.2k10k

• zeek/zeek

  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

  Language:C++6.2k1.2k

• OWASP-Benchmark/BenchmarkJava

  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

  Language:Java6461k

• phith0n/vueinfo

  Extract website information from Vue

  Language:JavaScript21415

• BishopFox/CVE-2023-3519

  RCE exploit for CVE-2023-3519

  Language:Python21140

• pen4uin/java-memshell-generator

  一款支持高度自定义的 Java 内存马生成工具｜A highly customizable Java memory-shell generation tool.

  Language:Java1.4k140

• kyo-w/router-router

  Java web路由内存分析工具

  Language:Java40025

• Stealerium/Stealerium

  Stealer + Clipper + Keylogger

  Language:C#1k241

• veo/wsMemShell

  WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

  Language:Java1.4k227

• achuna33/Memoryshell-JavaALL

  收集内存马打入方式

  47447

• BeichenDream/GodzillaMemoryShellProject

  Language:Java23030

• jaywcjlove/reference

  为开发人员分享快速参考备忘清单(速查表)

  Language:Dockerfile11.3k1.7k

• RedTeamPentesting/resocks

  mTLS-Encrypted Back-Connect SOCKS5 Proxy

  Language:Go37525

• yaklang/yaklang

  A programming language exclusively designed for cybersecurity

  Language:Go37142

• DataDog/dd-trace-java

  Datadog APM client for Java

  Language:Java550278

• OpenLiberty/open-liberty

  Open Liberty is a highly composable, fast to start, dynamic application server runtime environment

  Language:Java1.1k577