l1angfeng

l1angfeng's Stars

• Java-Chains/web-chains

  Web 版 Java Payload 生成与利用工具，提供 Java 反序列化、Hessian 1/2 反序列化等Payload生成，以及 JNDI、Fake Mysql、JRMPListener 等利用｜The web version of Java Payload generation and utilization tool provides Payload generation such as Java deserialization and Hessian 1/2 deserialization, as well as JNDI, Fake Mysql, JRMPListener, etc

  Language:Dockerfile84060

• c0r1/BypassPro

  AutoBypass403-BurpSuite 插件二开重构，优化执行逻辑

  Language:Java2589

• trufflesecurity/trufflehog

  Find, verify, and analyze leaked credentials

  Language:Go17.7k1.7k

• xuchengsheng/wx-dump-4j

  一款基于Java开发的微信数据分析工具。

  Language:Java2.3k345

• auuunya/eventwatcher

  EventWatcher is an open-source library designed for real-time monitoring of Windows Event Logs. It offers an efficient solution for tracking system events, application logs, and other critical event sources. Ideal for debugging, auditing, and system management.

  Language:Go11

• ys1231/appproxy

  基于flutter的Android vpn代理工具 Android VPN Proxy Tool Based on Flutter

  Language:Dart29147

• d78ui98/APKDeepLens

  Android security insights in full spectrum.

  Language:Python54975

• darkarmorlab/goflsh

  一款办公应用云凭证利用工具

  8711

• Whoopsunix/JavaRce

  Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式

  Language:Java47754

• LawRefBook/Laws

  Language:Python1.5k251

• SunWeb3Sec/DeFiVulnLabs

  To learn common smart contract vulnerabilities using Foundry!

  Language:Solidity1.7k288

• SunWeb3Sec/DeFiHackLabs

  Reproduce DeFi hacked incidents using Foundry.

  Language:Solidity5.4k1.2k

• imthaghost/goclone

  Website Cloner - Utilizes powerful Go routines to clone websites to your computer within seconds.

  Language:Go1.4k295

• MaximeBeasse/KeyDecoder

  KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds.

  Language:Dart3.1k186

• mttaggart/OffensiveNotion

  Notion as a platform for offensive operations

  Language:Rust1.1k124

• drwetter/testssl.sh

  Testing TLS/SSL encryption anywhere on any port

  Language:Shell8.1k1k

• soxoj/maigret

  🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

  Language:Python13.7k929

• a1phaboy/JsonDetect

  A burp Extender to detect json, include fastjson,jackson,gson

  Language:Java424

• wecooperate/iMonitorSDK

  The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发

  Language:Batchfile34581

• gojue/ecapture

  Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

  Language:C13.8k1.4k

• aleenzz/Cobalt_Strike_wiki

  Cobalt Strike系列

  2.3k585

• JoyChou93/java-sec-code

  Java web common vulnerabilities and security code which is base on springboot and spring security

  Language:Java2.4k655

• whwlsfb/BurpCrypto

  BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

  Language:Java1.5k171

• Getshell/LinuxTQ

  《Linux提权方法论》

  679104

• home-assistant/core

  :house_with_garden: Open source home automation that puts local control and privacy first.

  Language:Python74.8k31.5k

• agourlay/hprof-slurp

  JVM heap dump analyzer

  Language:Rust998

• 6vr/Bug-Bounty-Tips

  A collection of notes, checklists, writeups on bug bounty hunting and web application security.

  Language:Clojure14233

• sry309/PwdBUD

  一款SRC密码生成工具，尝试top字典无果后，可以根据域名、公司名等因素来生成特定的字典

  28460

• aquasecurity/kube-hunter

  Hunt for security weaknesses in Kubernetes clusters

  Language:Python4.8k587

• lijiejie/ds_store_exp

  A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

  Language:Python1.6k294