Laworigin

Coconut-Tree

Coconut Tree webshell manage

config-public

Linux/WSL config to optimize ergonomics, security, and productivity: vim/neovim, zsh, tmux, i3, emacs, vscode, ipython, jupyter, ranger, fzf, kitty, xkb, selfquant, firejail, systemd, etc

Laworigin.github.io

Auto-GPT

An experimental open-source attempt to make GPT-4 fully autonomous.

Bypass_Disable_functions_Shell

一个各种方式突破Disable_functions达到命令执行的shell

Censys_api_all

从Censys api 接口获取ipv4地址

cobra

Source Code Security Audit (源代码安全审计)

Code-Audit-Challenges

Code-Audit-Challenges

CVE-2021-22205

CVE-2021-22205 Unauthorized RCE

CVE-2022-30190

CVE-2022-30190 (Exploit Microsoft)

CVE-2024-3400

easyexcel

快速、简单避免OOM的java处理Excel工具

flyingsaucer

XML/XHTML and CSS 2.1 renderer in pure Java

jdbc_mysql_redfile

JNDIExploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

MySQL_Fake_Server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phpggc

rxxr2

spring-data-examples

Spring Data Example Projects

superaisecurity-vue-code

supplier

主流供应商的一些攻击性漏洞汇总

symfony

The Symfony PHP framework

symfony_demo

symfony组件漏洞的验证环境

weblogger

针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具

WeblogicEnvironment

Weblogic环境搭建工具

WisdomTree_Log

xmark

A PHP7 extension that can hook most functions/classes and parts of opcodes

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.