sunskyyao's repositories
aho-corasick
A-C implementation in "C". Tight-packed (interleaved) state-transition matrix -- as fast as it gets, as small as it gets.
Ajax-hook
:trident: Intercepting browser's AJAX requests which made by XMLHttpRequest.
coding-interview-university
A complete computer science study plan to become a software engineer.
copenapi
parser and cmdline tool for openapi spec
coreruleset
OWASP ModSecurity Core Rule Set (Official Repository)
gperftools
Main gperftools repository
hyperscan
A high-performance regular expression matching library
Java-Deserialization-Cheat-Sheet
The cheat sheet about Java Deserialization vulnerabilities
JSP-Webshells
Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
Learn-Web-Hacking
Study Notes For Web Hacking / Web安全学习笔记
lighttpd1.4
lighttpd1.4 on github for easier collaboration - main repo still on lighttpd.net
linux-kernel-illustrated
Illustrate linux kernel with diagrams
memleax
debugs memory leak of running process. Not maintained anymore, try `libleak` please.
ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.
OpenAPI-Specification
The OpenAPI Specification Repository
owasp-modsecurity-crs
OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
QingScan
一个漏洞扫描器粘合剂;支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证,SSH批量测试、vulmap。
reapoc
OpenSource Poc && Vulnerable-Target Storage Box.
sqli-labs
SQLI labs to test error based, Blind boolean based, Time based.
upload-labs
一个想帮你总结所有类型的上传漏洞的靶场
VulApps
快速搭建各种漏洞环境(Various vulnerability environment)
vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
WebShell
Webshell && Backdoor Collection
webshell-detect-bypass
绕过专业工具检测的Webshell研究文章和免杀的Webshell
xss-labs
xss 跨站漏洞平台
yarGen
yarGen is a generator for YARA rules