tuojianSun's Stars
threedr3am/learnjavabug
Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
frankli0324/ctfd-whale
CTFd plugin that allows your users to have exclusive environments for each challenge, with dynamic flags.
CTFTraining/CTFTraining
CTF Training 经典赛题复现环境
reddelexc/hackerone-reports
Top disclosed reports from HackerOne
wy876/books
阅读书籍整理的PDF文件,内网渗透,java代码审计,逆向学习,APP抓包总结
wy876/POC
收集整理漏洞EXP/POC,大部分漏洞来源网络,目前收集整理了1000多个poc/exp,长期更新。
f4cknet/pyhackme
HackTricks-wiki/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
c0ny1/vulstudy
使用docker快速搭建各大漏洞靶场,目前可以一键搭建17个靶场。
LandGrey/SpringBootVulExploit
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
Drun1baby/JavaSecurityLearning
记录一下 Java 安全学习历程,也算是半条学习路线了
zema1/watchvuln
一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it
sidaf/homebrew-pentest
Homebrew Tap - Pen Test Tools
euphrat1ca/Security-List
If you have any good suggestions or comments during the search process, please feedback some index experience in issues. Thank you for your participation.查阅过程中,如果有什么好的意见或建议,请在Issues反馈,感谢您的参与。
isecurityplus/OSCP
备考 OSCP 的各种干货资料/渗透测试干货资料
Maskhe/javasec
自己学习java安全的一些总结,主要是安全审计相关
Y4tacker/JavaSec
a rep for documenting my study, may be from 0 to 0.1
bfengj/CTF
关于我在CTF中的所有东西
LiLittleCat/awesome-free-chatgpt
🆓免费的 ChatGPT 镜像网站列表,持续更新。List of free ChatGPT mirror sites, continuously updated.
code4craft/tiny-spring
A tiny IoC container refer to Spring.
xf555er/RedTeamNotes
红队技术笔记
Mr-xn/RedTeam_BlueTeam_HW
红蓝对抗以及护网相关工具和资料,内存shellcode(cs+msf)和内存马查杀工具
0xsyr0/OSCP
OSCP Cheat Sheet
GreyDGL/PentestGPT
A GPT-empowered penetration testing tool
zgao264/AirFly
机场订阅一键生成ip代理池,让机场起飞!
source-xu/dictx
渗透测试根据企业名称或其他关键词定制化生成字典
ba0gu0/520apkhook
将安卓远控Apk附加进普通的App中,运行新生成的App时,普通App正常运行,远控正常上线。Attach the Android remote control APK to a regular app. When the newly generated app is launched, the regular app operates as normal while the remote control goes online seamlessly.
le31ei/ctf_challenges
适用于一线安服的ctf培训题目,全docker环境一键启动
ByPupil/ctfhub
Some Docker for CTF environments