Pinned Repositories
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
AgentInjectTool
改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
BMS
school project
BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
BurpSuitePro-2.1
什么? 你想用免费的BurpSuitePro版本!!!
Bypass_Disable_functions_Shell
一个各种方式突破Disable_functions达到命令执行的shell
disk
blackmail
poc
sqlilabs_payload
sqli-labs payloads
deidarayu's Repositories
deidarayu/sqlilabs_payload
sqli-labs payloads
deidarayu/poc
deidarayu/API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
deidarayu/BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
deidarayu/Bypass_Disable_functions_Shell
一个各种方式突破Disable_functions达到命令执行的shell
deidarayu/bypass_disablefunc_via_LD_PRELOAD
bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
deidarayu/cobra
Source Code Security Audit (源代码安全审计)
deidarayu/Conference
deidarayu/CVE-2017-11882
Proof-of-Concept exploits for CVE-2017-11882
deidarayu/ffmpeg-avi-m3u-xbin
deidarayu/java-sec-code
Java Web Common Vulnerabilities and Security Code.
deidarayu/LinEnum
Scripted Local Linux Enumeration & Privilege Escalation Checks
deidarayu/luokr.com
Python-based blog using tornado and bootstrap framework(螺壳网)
deidarayu/mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers
deidarayu/mooder
Mooder是一款开源、安全、简洁、强大的团队内部知识分享平台。
deidarayu/nodejs-study
deidarayu/note
笔记和思维导图
deidarayu/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
deidarayu/phpggc
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
deidarayu/phuip-fpizdam
deidarayu/ptrace
a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数,避开基于execve系统调用监控的命令日志
deidarayu/redis-py
Redis Python Client
deidarayu/rogue-jndi
A malicious LDAP server for JNDI injection attacks
deidarayu/secscan-authcheck
越权检测工具
deidarayu/SMBGhost_RCE_PoC
deidarayu/SpringBootVulExploit
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 checklist
deidarayu/sslyze
Fast and powerful SSL/TLS server scanning library.
deidarayu/struts-scan
Python2编写的struts2漏洞全版本检测和利用工具
deidarayu/upload-labs-writeup
upload-labs writeup
deidarayu/weakfilescan
动态多线程敏感信息泄露检测工具