pwntester

pwntester's Stars

• alibaba/arthas

  Alibaba Java Diagnostic Tool Arthas/Alibaba Java诊断利器Arthas

  Language:Java36k1.1k2.1k7.5k

• budtmo/docker-android

  Android in docker solution with noVNC supported and video recording

  Language:Python10.4k1753491.3k

• dstotijn/hetty

  An HTTP toolkit for security research.

  Language:Go6.2k10941353

• aquasecurity/kube-hunter

  Hunt for security weaknesses in Kubernetes clusters

  Language:Python4.8k97215591

• pwntester/octo.nvim

  Edit and review GitHub issues and pull requests from the comfort of your favorite editor

  Language:Lua2.6k13436156

• Vineflower/vineflower

  Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.

  Language:Java1.4k26214100

• RenwaX23/XSS-Payloads

  List of XSS Vectors/Payloads

  1.2k450257

• momosecurity/momo-code-sec-inspector-java

  IDEA静态代码安全审计及漏洞一键修复插件

  Language:Java1k2514149

• hackerscrolls/SecurityTips

  995562168

• pimps/JNDI-Exploit-Kit

  JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

  Language:Java912190167

• filedescriptor/untrusted-types

  Language:Svelte673161172

• pwnwiki/pwnwiki.github.io

  PwnWiki - The notes section of the pentesters mind.

  Language:HTML5608339270

• msrkp/PPScan

  Client Side Prototype Pollution Scanner

  Language:JavaScript51419662

• threedr3am/gadgetinspector

  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

  Language:Java4469058

• noidsirius/SootTutorial

  A step-by-step tutorial for Soot (a Java static analysis framework)

  Language:Java433719177

• pyn3rd/Spring-Boot-Vulnerability

  40216057

• Imanfeng/Apache-Solr-RCE

  Apache Solr Exploits 🌟

  3397357

• dschadow/JavaSecurity

  Java web and command line applications demonstrating various security topics

  Language:Java23714071

• dschadow/Java-Web-Security

  Java-Web-Security - Sichere Webanwendungen mit Java entwickeln

  Language:Java21710362

• advanced-security/codeql-queries

  [Deprecated] GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations. See GitHubSecurityLab/CodeQL-Community-Packs instead

  Language:CodeQL811020

• whitesquirrell/C0deVari4nt

  A variant analysis and visualisation tool that scans codebases for similar vulnerabilities

  Language:C#71506

• zbazztian/codeql-debug

  Language:CodeQL710110

• planetlevel/jot

  Java Observability Toolkit

  Language:Java619414

• securingdev/custom-codeql-queries

  Custom / Experimental CodeQL queries

  Language:CodeQL37205

• nccgroup/shouganaiyo-loader

  shouganaiyo-loader is a cross-platform Frida-based Node.js command-line tool that forces Java processes to load a Java/JVMTI agent regardless of whether or not the JVM has disabled the agent attach API.

  Language:JavaScript33804

• Marcono1234/serial-builder

  Library for manually creating Java serialization data.

  Language:Java29321

• pwillworth/galaxyharvester

  Galaxy Harvester resource tracking web application for Star Wars Galaxies Emulator servers

  Language:Python28132920

• advanced-security/custom-codeql-bundle

  An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations.qll` library

  Language:CodeQL25303

• hakivvi/ObjectPwnStream

  a Ruby implementation of Java's ObjectInputStream and ObjectOutputStream.

  Language:Ruby16102

• wesleydekraker/xamarin-security-scanner

  A tool to find security vulnerabilities in Xamarin.Android apps.

  Language:C#12330