lz2y

yaml-payload-for-ruoyi

A memory shell for ruoyi

DubboPOC

Apache Dubbo漏洞测试Demo及其POC

CVE-2021-2394

POC of CVE-2021-2394

CVE-2022-26134

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

WebLogic_Basic_Poc

用于WebLogic poc及exp测试的基础脚本，后续将集成各版本poc库

BehinderClientSource

冰蝎客户端源码-3.0-BETA11.t00ls

gadgetinspector

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

geojson-map-china

GeoJson Data of China

GodzillaSource

哥斯拉源码-v3.03-godzilla

CobaltStrike

CobaltStrike's source code

JNDIExploit

A malicious LDAP server for JNDI injection attacks

lz2y

lz2y.github.io

my blog

Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

ysomap

A helpful Java Deserialization exploit framework based on ysoserial