whwlsfb's Stars
baidu/amis
前端低代码框架,通过 JSON 配置就能生成各种页面。
zincsearch/zincsearch
ZincSearch . A lightweight alternative to elasticsearch that requires minimal resources, written in Go.
analysis-tools-dev/static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
tiny-craft/tiny-rdm
Tiny RDM (Tiny Redis Desktop Manager) - A modern, colorful, super lightweight Redis GUI client for Mac, Windows, and Linux.
Col-E/Recaf
The modern Java bytecode editor
erebe/wstunnel
Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
pry0cc/axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
albertan017/LLM4Decompile
Reverse Engineering: Decompiling Binary Code with Large Language Models
neargle/my-re0-k8s-security
:atom: [WIP] 整理过去的分享,从零开始的Kubernetes攻防 🧐
waf/CSharpRepl
A command line C# REPL with syntax highlighting – explore the language, libraries and nuget packages interactively.
es3n1n/no-defender
A slightly more fun way to disable windows defender + firewall. (through the WSC api)
wux1an/wxapkg
微信小程序反编译工具,.wxapkg 文件扫描 + 解密 + 解包工具
pascal-lab/Tai-e
An easy-to-learn/use static analysis framework for Java
whwlsfb/JDumpSpider
HeapDump敏感信息提取工具
jar-analyzer/jar-analyzer
Jar Analyzer - 一个JAR包分析工具,SCA漏洞分析,批量分析JAR包,方法调用关系搜索,字符串搜索,Spring组件分析,CFG程序分析,JVM栈帧分析,进阶表达式搜索,字节码指令级的动态调试分析,反编译JAR包一键导出,一键提取序列化数据恶意代码,一键分析BCEL字节码
fiddyschmitt/File-Tunnel
Tunnel TCP connections through a file
The-Viper-One/PsMapExec
A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec
bytedance/netcap
veo/vagent
多功能 java agent 内存马
jar-analyzer/jar-obfuscator
Jar Obfuscator - 一个 JAR/CLASS 字节码混淆工具,支持包名/类名/方法名/字段名/参数名引用分析和重命名混淆方式,支持字符串加密/整型异或混淆/垃圾代码花指令混淆/等方式,支持方法和字段的隐藏,支持 NATIVE 层的 JVMTI 代码加密,配置简单,文档教程齐全,容易上手
titaniumnetwork-dev/Ultraviolet-App
Example application of Ultraviolet which can be deployed in production.
yzddmr6/Java-Js-Engine-Payloads
Java Js Engine Payloads All in one
mobile46/de4dot
.NET deobfuscator and unpacker.
YYHYlh/Dubbo-Scan
一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。
Y4tacker/HackingFernFlower
2023白帽补天大会部分代码
luelueking/Bypass_JVM_Verifier
Bypass JVM Class ByteCode Verifier , 对抗反编译器
Whoopsunix/utf-8-overlong-encoding
抽离出 utf-8-overlong-encoding 的序列化逻辑,实现 2 3 字节加密序列化数组
luelueking/ClazzSearcher
一款使用Yaml定义搜索规则来搜索Class的工具
cbwang505/TcpServerChannelRce
一款基于James Forshaw的.NET Remoting反序列化工具升级版在TypeFilterLevel.Low模式无文件payload任意代码执行poc的开发心得
dushixiang/meteor
Meteor is a network tool that can quickly forward tcp and udp ports and start http, https and socks5 proxy servers.