MagicZer0

fastjson-rce-exploit

exploit for fastjson remote code execution vulnerability

Jackson_RCE-CVE-2019-12384

CVE-2019-12384 漏洞测试环境

Weblogic_CVE-2020-2883_POC

Proof of concept for Weblogic CVE-2020-2883

ysoserial-for-woodpecker

给woodpecker框架量身定制的ysoserial

APT_CyberCriminal_Campagin_Collections

APT & CyberCriminal Campaign Collection

Blacklist3r

project-blacklist3r

codeql-go

The CodeQL extractor and libraries for Go.

CVE-2021-3156

Sudo Baron Samedit Exploit

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

gitignore

A collection of useful .gitignore templates

goahead-gpl

Embedthis GoAhead Community Edition Web Server

how2heap

A repository for learning various heap exploitation techniques.

inspector-gadget

Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language

Intranet_Penetration_Tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

java-jwt

Java implementation of JSON Web Token (JWT)

JRE8u20_RCE_Gadget

JRE8u20_RCE_Gadget

navex

production_12.2

ql

The libraries and queries that power CodeQL and LGTM.com

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

SSRFmap

Automatic SSRF fuzzer and exploitation tool

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

unix-history-repo

Continuous Unix commit history from 1970 until today

weblogicScanner

weblogic 漏洞扫描工具。目前包含 CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890

weggli

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.