caiqiqi

yii2

Yii 2: The Fast, Secure and Professional PHP Framework

elastalert

Easy & Flexible Alerting With ElasticSearch

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

yaf

Fast php framework written in c, built in php extension

Github-Monitor

Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)

slowhttptest

Application Layer DoS attack simulator

XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

Bypass_Disable_functions_Shell

一个各种方式突破Disable_functions达到命令执行的shell

weakfilescan

动态多线程敏感信息泄露检测工具

CMSScan

CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues

redis-rce

Redis 4.x/5.x RCE

GTRS

GTRS - Google Translator Reverse Shell

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

Paper

Web Security Technology & Vulnerability Analysis Whitepapers

SecurityManageFramwork

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

scep

Go SCEP server

openssh-backdoor-kit

:bomb: just for fun ¯\_(ツ)_/¯

yujianportscan

一个基于VB.NET + IOCP模型开发的高效端口扫描工具，支持IP区间合并，端口区间合并，端口指纹深度探测

JRE8u20_RCE_Gadget

JRE8u20_RCE_Gadget

poodle-PoC

:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

libssh-scanner

Script to identify hosts vulnerable to CVE-2018-10933

attackRmi

solutions-bwapp

In progress rough solutions to bWAPP / bee-box

confluence

Confluence Python API, please check ticket below 🆘

e-cology

e-cology OA_Beanshell_RCE

WPSpider

A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.

thinkphp-5.1.29

S2-057-CVE-2018-11776

A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)

java-diff-libs-benchmark

Javaで実装されたdiffライブラリのベンチマークテスト