w0lfzhang

w0lfzhang's Stars

• fenixsoft/awesome-fenix

  讨论如何构建一套可靠的大型分布式系统

  Language:Vue8.8k1k

• e11i0t4lders0n/SAML-SSO

  182

• feihong-cs/ShiroExploit-Deprecated

  Shiro550/Shiro721 一键化利用工具，支持多种回显方式

  Language:Java1.9k300

• lwch/natpass

  🔥居家办公，远程开发神器

  Language:Go4.2k480

• github/codeql

  CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

  Language:CodeQL7.7k1.5k

• felixgr/pytaint

  Language:Python296

• cdaller/security_taint_propagation

  Java taint propagation for java. Define tainted sources, sanitizer methods and sinks via aspects.

  Language:Java2710

• zerothoughts/spring-jndi

  Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

  Language:Java11639

• knownsec/pocsuite3

  pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

  Language:Python3.6k780

• projectdiscovery/nuclei-templates

  Community curated list of templates for the nuclei engine to find security vulnerabilities.

  Language:JavaScript9.2k2.6k

• projectdiscovery/nuclei

  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

  Language:Go20.5k2.5k

• roadwy/RIP

  1.5k217

• baidu/openrasp

  🔥Open source RASP solution

  Language:C++2.8k602

• HXSecurity/DongTai

  Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

  Language:Python1.2k145

• tangxiaofeng7/SecExample

  JAVA 漏洞靶场 (Vulnerability Environment For Java)

  Language:HTML431106

• HXSecurity/DongTai-agent-java

  Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

  Language:Java682192

• phith0n/JavaThings

  Share Things Related to Java - Java安全漫谈笔记相关内容

  Language:Java1.8k210

• JackOfMostTrades/gadgetinspector

  A byte code analyzer for finding deserialization gadget chains in Java applications

  Language:Java987222

• httpvoid/writeups

  1.2k174

• wh1t3p1g/tabby

  A CAT called tabby ( Code Analysis Tool )

  Language:Java1.3k153

• wh1t3p1g/ysomap

  A helpful Java Deserialization exploit framework.

  Language:Java1.2k149

• ossec/ossec-hids

  OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

  Language:C4.5k1k

• snail007/goproxy

  🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。

  Language:Go15.8k3k

• rushter/socks5

  A toy socks 5 server written in Python

  Language:Python16764

• LandGrey/SpringBootVulExploit

  SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

  Language:Java5.8k1.3k

• GrrrDog/Java-Deserialization-Cheat-Sheet

  The cheat sheet about Java Deserialization vulnerabilities

  3k596

• joaomatosf/jexboss

  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

  Language:Python2.4k638

• w0lfzhang/sonicwall-cve-2019-7482

  Language:Python43

• neex/phuip-fpizdam

  Exploit for CVE-2019-11043

  Language:Go1.8k247

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.8k1.8k