secstar

w13scan

Passive Security Scanner (被动式安全扫描器)

groovy-sandbox

(Deprecated) Compile-time transformer to run Groovy code in a restrictive sandbox

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

jdk8u_jdk

SerializationDumper

A tool to dump Java serialization streams in a more human readable form.

BaRMIe

Java RMI enumeration and attack tool.

cloudwalker

CloudWalker Platform

BypassCaiDao

过WAF菜刀

stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

CVE-2019-11932

Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif

gosec

Go security checker

30-seconds-of-code

Short code snippets for all your development needs

FlowDroid

FlowDroid Static Data Flow Tracker

gitleaks

Protect and discover secrets using Gitleaks 🔑

svnExploit

SvnExploit支持SVN源代码泄露全版本Dump源码

JStap

Modular static malicious JavaScript detection system

Java-Deserialization-Scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

MLDetectVuln

Works about detecting vulnerable using ML.

Prepare-for-AWD

AWD攻防赛脚本集合

geektime-spring-family

极客时间视频课程《玩转Spring全家桶》

p0tools

Project Zero Docs and Tools

PENTESTING-BIBLE

articles

spring-framework

Spring Framework

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

CVE-2019-2725

CVE-2019-2725命令回显+webshell上传+最新绕过

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

terminal

The new Windows Terminal and the original Windows console host, all in the same place!

Cobra

Source Code Security Audit (源代码安全审计)

LibScout

LibScout: Third-party library detector for Java/Android apps