Pinned Repositories
captcha-killer
burp验证码识别接口调用插件
chunked-coding-converter
Burp suite 分块传输辅助插件
Class_NetworkManagement
AutoHotkey wrapper for Network Management technology
Emergency-Response-Notes
应急响应实战笔记，一个安全工程师的自我修养。
evilpdf
ExpDemo-JavaFX
图形化漏洞利用Demo-JavaFX版
FastjsonExploit
Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
FastjsonScan
Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
geektime-spring-family
极客时间视频课程《玩转Spring全家桶》
log4j2_Pscan
指定payload后可以递归测试请求中每个参数的burp插件
yezi-m4c1's Repositories
yezi-m4c1/log4j2_Pscan
指定payload后可以递归测试请求中每个参数的burp插件
yezi-m4c1/captcha-killer
burp验证码识别接口调用插件
yezi-m4c1/chunked-coding-converter
Burp suite 分块传输辅助插件
yezi-m4c1/Class_NetworkManagement
AutoHotkey wrapper for Network Management technology
yezi-m4c1/Emergency-Response-Notes
应急响应实战笔记，一个安全工程师的自我修养。
yezi-m4c1/evilpdf
yezi-m4c1/ExpDemo-JavaFX
图形化漏洞利用Demo-JavaFX版
yezi-m4c1/FastjsonExploit
Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
yezi-m4c1/FastjsonScan
Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
yezi-m4c1/geektime-spring-family
极客时间视频课程《玩转Spring全家桶》
yezi-m4c1/godnslog
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
yezi-m4c1/GSLibrary
轻量级知识库&POC管理平台
yezi-m4c1/HackBrowserData
Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。
yezi-m4c1/HackJava
《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
yezi-m4c1/Java-Deserialization-Cheat-Sheet
The cheat sheet about Java Deserialization vulnerabilities
yezi-m4c1/java-memshell-scanner
通过jsp脚本扫描java web Filter/Servlet型内存马
yezi-m4c1/JavaSecInterview
打造最强的Java安全研究与安全开发面试题库，包含问题和详细的答案，帮助师傅们找到满意的工作
yezi-m4c1/learnjavabug
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
yezi-m4c1/OddProxyDemo
yezi-m4c1/OSCP-Preparation-Material
All in One OSCP Preparation Material
yezi-m4c1/passive-scan-client
Burp被动扫描流量转发插件
yezi-m4c1/pFuzz
pFuzz helps us to bypass web application firewall by using different methods at the same time.
yezi-m4c1/sec-wiki
ApacheCN 安全知识库
yezi-m4c1/ShiroExploit-Deprecated
Shiro550/Shiro721 一键化利用工具，支持多种回显方式
yezi-m4c1/TPscan
一键ThinkPHP漏洞检测
yezi-m4c1/vulnerability-list
在渗透测试中快速检测常见中间件、组件的高危漏洞。
yezi-m4c1/vulnerability-paper
收集的文章
yezi-m4c1/WebGoat
WebGoat 8.0
yezi-m4c1/wJa
java decompile audit tools
yezi-m4c1/ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.