wafinfo

Sunflower_get_Password

一款针对向日葵的识别码和验证码提取工具

DecryptTools

DecryptTools-综合解密

Hikvision

海康威视综合安防平台后渗透利用工具

NCTOOls

一款针对用友NC综合漏洞利用工具

cobaltstrike

cobaltstrike插件

TeamViewer

TeamView Get PassWord

MeterSphere-plugin-Backdoor

支持注入内存马和Bypass WAF

ezOFFICE_Decrypt

万户数据库解密

autoDecoder

Burp插件，转发处理

Bypass

免杀shellcode

SyscallLoader

SyscallLoader

CS-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist

noPac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

ojdkbuild

Community builds using source code from OpenJDK project

wafinfo

al-waf

CVE-2016-3088

CVE-2021-22205

CVE-2021-22205& GitLab CE/EE RCE

Java

关于学习java安全的一些知识,正在学习中ing,欢迎fork and star

KAB8345

LADSS

PoC for LADSS (0day)

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

OA-Seeyou

note

Packer-Fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

PassList

👍 Awesome password to hack

some-automated-script

SpringBoot-log4j2-RCE

vagent

多功能 java agent 内存马

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

wafinfo.github.io