Kaide0521

tabby

A CAT called tabby ( Code Analysis Tool )

CodeInspector

基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析

copagent

java memory web shell extracting tool

CTF-Scripts

一些简单的scripts，慢慢push

CVE-2020-2551

Weblogic IIOP CVE-2020-2551

docsify-demo

手把手教你搭建一个文档类型的网站!免费且高速！

DongTai-agent-java

“火线～洞态IAST”是一款专为甲方安全人员、代码审计工程师和0 Day漏洞挖掘人员量身打造的辅助工具，可用于集成devops环境进行漏洞检测、作为代码审计的辅助工具和自动化挖掘0 Day。

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

ekp

esapi-java-legacy

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.

GadgetProbe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

iast-vms

A prototype of an Interactive Application Security Testing System

kaide0521.github.io

learnjavabug

Java安全相关的漏洞和技术demo，其中包括原生Java、Fastjson、Jackson、Hessian2以及XML反序列化漏洞利用和Dubbo（Hessian2反序列化）、Shiro（PaddingOracleCBC）等框架的exploits，并且还有Java Security Manager绕过、Dubbo-Hessian2安全加固、RMI利用等等实践代码。

MemShellDemo

memshell demo for java and php

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Red-vs-Blue

红蓝对抗交流心得

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

searchtest

searchtest.aqgf

SharpZipRunner

Executes position independent shellcode from an encrypted zip

TestCodeQL

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

VulApps

快速搭建各种漏洞环境(Various vulnerability environment)

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulnhub-writeups

Writeups for Vulnhub's boot2root machines that I've done

VulnRange

漏洞靶场-快速搭建Web安全漏洞和第三方组件漏洞环境，用于漏洞复现和研究

weblogicScanner

weblogic 漏洞扫描工具。目前包含 CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890

wiki

NyaaWiki, built with Docsify.

ysoserial-1

此项目为su18大佬的仓库镜像，如有问题可发issuse删库