su18

su18's Stars

• chaitin/SafeLine

  SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

  Language:Go15.4k84916928

• jassics/security-study-plan

  Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

  4.5k10913564

• zxh0/jvm.go

  A toy JVM written in Go

  Language:Go3.6k18026469

• neargle/my-re0-k8s-security

  :atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

  Language:Shell3k463461

• ashemery/exploitation-course

  Offensive Software Exploitation Course

  Language:Python2.4k602384

• zema1/suo5

  一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

  Language:Java2.2k1947206

• pen4uin/java-memshell-generator

  一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

  Language:Java1.8k2134202

• zxh0/jvmgo-book

  《自己动手写Java虚拟机》随书源代码

  Language:Go1.6k7738529

• zema1/watchvuln

  一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

  Language:Go1.5k1475167

• youthlql/JavaYouth

  主要是Java技术栈的文章

  1.2k1519453

• obiscr/ChatGPT

  This project is a plugin that supports ChatGPT running on JetBrains series IDE.

  Language:Java1k17285235

• f0ng/autoDecoder

  Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

  Language:Java1k113883

• chaitin/blazehttp

  BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.

  Language:Go75491387

• rebeyond/JNDInjector

  一个高度可定制化的JNDI和Java反序列化利用工具

  4605529

• burpheart/koko-moni

  一个基于网络空间搜索引擎的攻击面管理平台，可定时进行资产信息爬取，及时发现新增资产，本项目聚合了 Fofa、Hunter、Quake、Zoomeye 和 Threatbook 的数据源，并对获取到的数据进行去重与清洗

  44291422

• qtc-de/beanshooter

  JMX enumeration and attacking tool.

  Language:Java41281745

• Esonhugh/sshd_backdoor

  /root/.ssh/authorized_keys evil file watchdog with ebpf tracepoint hook.

  Language:C3354339

• Ppsoft1991/CodeReviewTools

  通过正则搜索、批量反编译特定Jar包中的class名称

  Language:Java3093532

• AdoptOpenJDK/jdk9-jigsaw

  Examples and exercises based on some of the features of jigsaw in JDK9/Jigsaw (Early Access builds)

  Language:Java2845211145

• soot-oss/heros

  IFDS/IDE Solver for Soot and other frameworks

  Language:Java240222486

• quentinhardy/jndiat

  JNDI Attacking Tool

  Language:Java2358248

• 4ra1n/java-gate

  Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

  Language:C1944120

• woodpecker-appstore/jexpr-encoder-utils

  Java表达式语句生成器

  Language:Java1854113

• horizon3ai/vRealizeLogInsightRCE

  POC for RCE using vulnerabilities described in VMSA-2023-0001

  Language:Python1516024

• BeichenDream/JDR

  Language:Java1373010

• flowerwind/AutoGenerateXalanPayload

  cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件

  Language:XSLT89105

• r00tuser111/SerializationDumper-Shiro

  基于SerializationDumper的Shiro Cookie序列化数据解密小工具

  51203

• ODDFuzz/ODDFuzz

  S&P2023 Paper

  39630

• waderwu/nativeRasp

  nativeRasp that can hook native methods

  Language:C24103

• johnngugi/CORBA-Example

  A simple CORBA implementation using Java

  Language:Java192015