liey1

liey1's Stars

• wy876/POC

  收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1000多个poc/exp，长期更新。

  3.3k697

• 5up3rc/weblogic_cmd

  weblogic t3 deserialization rce

  Language:Java26296

• teamssix/awesome-cloud-security

  awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

  1.7k213

• chaitin/xapp

  1896

• wh0amitz/KRBUACBypass

  UAC Bypass By Abusing Kerberos Tickets

  Language:C#46260

• anchore/grype

  A vulnerability scanner for container images and filesystems

  Language:Go8.4k543

• iknowjason/Awesome-CloudSec-Labs

  Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

  1.4k177

• r0oth3x49/ghauri

  An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

  Language:Python2.9k284

• JFormDesigner/FlatLaf

  FlatLaf - Swing Look and Feel (with Darcula/IntelliJ themes support)

  Language:Java3.3k265

• ambionics/wrapwrap

  Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

  Language:Python1565

• SecuraBV/jws2pubkey

  jws2pubkey tool

  Language:Python364

• chaitin/SafeLine

  serve as a reverse proxy to protect your web services from attacks and exploits.

  Language:Go11.7k716

• kyo-w/router-router

  Java web路由内存分析工具

  Language:Java40825

• BytecodeDL/ByteCodeDL

  A declarative static analysis tool for jvm bytecode based Datalog like CodeQL

  Language:Shell32218

• Vme18000yuan/FreePOC

  Language:Python27727

• corkami/collisions

  Hash collisions and exploitations

  Language:Python3k182

• KingBridgeSS/jdifferer

  Language:Java651

• pascal-lab/Tai-e

  An easy-to-learn/use static analysis framework for Java

  Language:Java1.3k172

• TheKingOfDuck/MySQLMonitor

  MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)

  Language:Java45389

• adrgs/requestrepo

  Analyze HTTP and DNS requests and create custom DNS records for your subdomain

  Language:JavaScript35416

• pen4uin/java-memshell-generator

  一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

  Language:Java1.6k169

• BeichenDream/JDR

  Language:Java13410

• Marven11/Fenjing

  专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

  Language:Python58336

• chaitin/xray

  一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

  Language:Vue10.2k1.8k

• woodpecker-appstore/jexpr-encoder-utils

  Java表达式语句生成器

  Language:Java17612

• HXSecurity/DongTai

  Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

  Language:Python1.2k143

• XingangPan/DragGAN

  Official Code for DragGAN (SIGGRAPH 2023)

  Language:Python35.6k3.4k

• ffffffff0x/1earn

  ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

  Language:C++5.2k1.2k

• ax1sX/SecurityList

  A list for Web Security and Code Audit

  863154

• Liuk3r/CVE-2023-32233

  CVE-2023-32233: Linux内核中的安全漏洞

  Language:C36779