r00t4dm

mimipenguin

A tool to dump the login password from the current linux user

MS-SharePoint-July-Patch-RCE-PoC

libinjection

SQL / SQLI tokenizer parser analyzer

JDD

netty

Netty project - an event-driven asynchronous network application framework

RCEFuzzer

一个以fuzz为中心**的被动扫描工具

My-Presentation-Slides

Collections of Orange Tsai's public presentation slides.

javaeasyscan

javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手

zimbra-10

Zimbra-10 Docker

yaml-payload

A tiny project for generating SnakeYAML deserialization payloads

r3ctf-2024

jar-obfuscator

Jar Obfuscator - 一个 JAR/CLASS 字节码混淆工具，支持包名/类名/方法名/字段名/参数名引用分析和重命名混淆方式，支持字符串加密/整型异或混淆/垃圾代码花指令混淆/等方式，支持方法和字段的隐藏，支持 NATIVE 层的 JVMTI 代码加密，配置简单，文档教程齐全，容易上手

CTF-Java-Gadget

atkjdbc

Write Up Code of HITB Sec-Sin 2021 Make JDBC Attacks Brilliant Again

jol

https://openjdk.org/projects/code-tools/jol

CVE-2024-32002_EXP

CVE-2024-32002

CVE-2024-32002 RCE PoC

AhoCorasickDoubleArrayTrie

An extremely fast implementation of Aho Corasick algorithm based on Double Array Trie.

safe-rules

详细的C/C++编程规范指南，由360质量工程部编著，适用于桌面、服务端及嵌入式软件系统。

javaparser

Java 1-21 Parser and Abstract Syntax Tree for Java with advanced analysis functionalities.

yara

The pattern matching swiss knife

Z-Godzilla_ekp

哥斯拉webshell管理工具二次开发规避流量检测设备

proxyshell

Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207

cve-2022-22947-godzilla-memshell

CVE-2022-22947 注入Godzilla内存马

CVE-2024-21345

Proof-of-Concept for CVE-2024-21345

bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

awesome-honeypots

an awesome list of honeypot resources

sec-dev-in-action-src

《白帽子安全开发实战》配套代码

x-crawl

Flexible Node.js AI-assisted crawler library

SerializationDumper

A tool to dump Java serialization streams in a more human readable form.