liey1's Stars
wy876/POC
收集整理漏洞EXP/POC,大部分漏洞来源网络,目前收集整理了1000多个poc/exp,长期更新。
5up3rc/weblogic_cmd
weblogic t3 deserialization rce
teamssix/awesome-cloud-security
awesome cloud security 收集一些国内外不错的云安全资源,该项目主要面向国内的安全人员
chaitin/xapp
wh0amitz/KRBUACBypass
UAC Bypass By Abusing Kerberos Tickets
anchore/grype
A vulnerability scanner for container images and filesystems
iknowjason/Awesome-CloudSec-Labs
Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
r0oth3x49/ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
JFormDesigner/FlatLaf
FlatLaf - Swing Look and Feel (with Darcula/IntelliJ themes support)
ambionics/wrapwrap
Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.
SecuraBV/jws2pubkey
jws2pubkey tool
chaitin/SafeLine
serve as a reverse proxy to protect your web services from attacks and exploits.
kyo-w/router-router
Java web路由内存分析工具
BytecodeDL/ByteCodeDL
A declarative static analysis tool for jvm bytecode based Datalog like CodeQL
Vme18000yuan/FreePOC
corkami/collisions
Hash collisions and exploitations
KingBridgeSS/jdifferer
pascal-lab/Tai-e
An easy-to-learn/use static analysis framework for Java
TheKingOfDuck/MySQLMonitor
MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)
adrgs/requestrepo
Analyze HTTP and DNS requests and create custom DNS records for your subdomain
pen4uin/java-memshell-generator
一款支持自定义的 Java 内存马生成工具|A customizable Java in-memory webshell generation tool.
BeichenDream/JDR
Marven11/Fenjing
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
chaitin/xray
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
woodpecker-appstore/jexpr-encoder-utils
Java表达式语句生成器
HXSecurity/DongTai
Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.
XingangPan/DragGAN
Official Code for DragGAN (SIGGRAPH 2023)
ffffffff0x/1earn
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
ax1sX/SecurityList
A list for Web Security and Code Audit
Liuk3r/CVE-2023-32233
CVE-2023-32233: Linux内核中的安全漏洞