shengqi158

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

GScan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

spy-debugger

微信调试，各种WebView样式调试、手机浏览器的页面真机调试。便捷的远程调试手机页面、抓包工具，支持：HTTP/HTTPS，无需USB连接设备。

Security-PPT

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

SQLInjectionWiki

A wiki focusing on aggregating and documenting various SQL injection methods

secscan-authcheck

越权检测工具

pyre-check

Performant type-checking for python.

json-web-token-attacker

spring-mvc-tutorial

Spring MVC 5 Tutorial - Guide to spring mvc framework

rhizobia_J

JAVA安全SDK及编码规范

NetWorkPacketCapture

It is used to capture network packet via Android VPN.

groovy-sandbox

(Deprecated) Compile-time transformer to run Groovy code in a restrictive sandbox

BeanStack

X41 BeanStack - Stack Trace Fingerprinting BETA

chunked-coding-converter

Burp suite 分块传输辅助插件

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

pentest_study

从零开始内网渗透学习

vulncode-db

Vulncode-DB project

DoraBox

DoraBox - Basic Web Vulnerability Training

neural-networks-and-deep-learning

Code samples for my book "Neural Networks and Deep Learning"

TensorFlow-Course

:satellite: Simple and ready-to-use tutorials for TensorFlow

redteam

Red Team Scripts by d0nkeys (ex SnadoTeam)

NET-Deserialize

总结了20+.Net反序列化文章，持续更新

steady

Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/

php-security-check-list

PHP Security Check List [ EN ] 🌋 ☣️

Awesome-WAF

🔥 Web-application firewalls (WAFs) from security standpoint.

Micro8

Gitbook

mjet

MOGWAI LABS JMX exploitation toolkit

Blade

A webshell connection tool with customized WAF bypass payloads