Pinned Repositories
ace-builds
Packaged version of Ace code editor
ansible-role-cis-amazon-linux2
BlueLotus_XSSReceiver
XSS平台 CTF工具 Web安全工具
CDK
CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.
centos-cis-benchmark
CIS CentOS Linux 7 Benchmark
CTFTraining
CTF Training 经典赛题复现环境
CVE-2021-3156
CVE-2021-3157
dom4j
flexible XML framework for Java
dubbo-exp
Dubbo反序列化一键快速攻击测试工具，支持dubbo协议和http协议，支持hessian反序列化和java原生反序列化。
yq9721's Repositories
yq9721/ace-builds
Packaged version of Ace code editor
yq9721/ansible-role-cis-amazon-linux2
yq9721/BlueLotus_XSSReceiver
XSS平台 CTF工具 Web安全工具
yq9721/CDK
CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.
yq9721/centos-cis-benchmark
CIS CentOS Linux 7 Benchmark
yq9721/CTFTraining
CTF Training 经典赛题复现环境
yq9721/CVE-2021-3156
yq9721/CVE-2021-3157
yq9721/dom4j
flexible XML framework for Java
yq9721/dubbo-exp
Dubbo反序列化一键快速攻击测试工具，支持dubbo协议和http协议，支持hessian反序列化和java原生反序列化。
yq9721/Fastjson
Fastjson姿势技巧集合
yq9721/gittest
11111
yq9721/guns-vip
yq9721/guns-vip-new
yq9721/JavaThings
Share Things Related to Java - Java安全漫谈笔记相关内容
yq9721/jd_kill
京东茅台懂得都懂 main分支是新版本，old分支是docker之前的版本
yq9721/JNDIExploit
A malicious LDAP server for JNDI injection attacks
yq9721/ksubdomain
Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
yq9721/mybatis-generator-nodollar
mybatis generator 生成配置文件，去掉order by sql拼接
yq9721/MySQL_Fake_Server
MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize
yq9721/Penetration_Testing_POC
有关渗透测试的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
yq9721/RedTeam_BlueTeam_HW
红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）查杀工具
yq9721/shiro_attack
shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）
yq9721/Some-PoC-oR-ExP
各种漏洞poc、Exp的收集或编写
yq9721/Viper
Redteam operation platform with webui 图形化红队行动辅助平台
yq9721/wxappUnpacker
小程序反编译(支持分包)
yq9721/yaml-payload
Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg
yq9721/ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.