ischjm's Stars
WuFengXue/android-reverse
安卓逆向工具汇总 / Awsome Android Reverse Tools
ExpLangcn/InfoSearchAll
为了方便安全从业人员在使用网络测绘平台进行信息搜集时的效率,本程序集合了多个网络测绘平台,可以快速在多个网络测绘平台搜索信息并且合并展示及导出。
telanflow/TryScan
TryScan自动化SQL注入检测
Junehck/SQL-injection-bypass
记录实战中的各种sql注入绕过姿势
Qihoo360/poseidon
A search engine which can hold 100 trillion lines of log data.
nocodb/nocodb
🔥 🔥 🔥 Open Source Airtable Alternative
s0md3v/XSStrike
Most advanced XSS scanner.
holymonk/AlipayTinyAppCrack
破解支付宝小程序ssl验证,实现代理抓包
r0ysue/AndroidFridaBeginnersBook
《安卓Frida逆向与抓包实战》随书附件
CTF-MissFeng/Watchdog
Watchdog是bayonet修改版,重新优化了数据库及web及扫描程序,加入多节点
LangziFun/LangSrcCurise
SRC子域名资产监控
Java-S12138/MICOM_GoLang
js-org/js.org
Dedicated to JavaScript and its awesome community since 2015
baidu-security/openrasp-iast
IAST 灰盒扫描工具
HXSecurity/DongTai
Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.
baidu/openrasp
🔥Open source RASP solution
Mr-xn/RedTeam_BlueTeam_HW
红蓝对抗以及护网相关工具和资料,内存shellcode(cs+msf)和内存马查杀工具
TheKingOfDuck/fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
Mayter/sec-charts
更新了更多的思维导图。
ffffffff0x/1earn
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
wei/socialify
💞 Socialify your project. 🌐 Share with the world!
damit5/damit5.github.io
个人部分知识总结
yeszao/dnmp
Docker LNMP (Nginx, PHP7/PHP5, MySQL, Redis)
l4yn3/micro_service_seclab
Java漏洞靶场
j3ers3/Hello-Java-Sec
☕️ Java Security,安全编码和代码审计
louislam/uptime-kuma
A fancy self-hosted monitoring tool
welk1n/JNDI-Injection-Exploit
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
exp1orer/JNDI-Inject-Exploit
解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用,探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
remkop/picocli
Picocli is a modern framework for building powerful, user-friendly, GraalVM-enabled command line apps with ease. It supports colors, autocompletion, subcommands, and more. In 1 source file so apps can include as source & avoid adding a dependency. Written in Java, usable from Groovy, Kotlin, Scala, etc.
NickstaDB/SerializationDumper
A tool to dump Java serialization streams in a more human readable form.