wh1t3p1g

tabby

A CAT called tabby ( Code Analysis Tool )

ysomap

A helpful Java Deserialization exploit framework.

ysoserial

forked from frohoff/ysoserial and added my own payloads.

tabby-path-finder

A neo4j procedure for tabby

phpggc

a php serialize/unseralize tools fork from ambionics/phpggc, add chinese common php framework

Struts2Environment

Struts2 历史版本的漏洞环境

MonitorClient

网站实时监控文件变动及webshell检测查杀工具

tabby-vul-finder

A vul-finder for loading CPG and automated finding vul-call-chains

MonitorServer

同一局域网内网站源码监控、webshell检测总控端

tabby-intellij-plugin

A IntelliJ Plugin for Tabby to Find Vulnerabilities Easily

webshell

This is a webshell open source project

AutoTransferVulnerables

自动化最新漏洞翻译小工具，通过有道API实现

botnets

a repository for botnets demos

cms-scan

An active scan extension for Burp that provides supplemental coverage when testing popular content management systems.

neo4j-apoc-procedures

Awesome Procedures On Cypher for Neo4j - codenamed "apoc"                     If you like it, please ★ above ⇧            

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

BenchmarkJava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

cobra

Source Code Security Audit (源代码安全审计)

csprogram

历年考研复试上机题练习

docker

dockerfiles

exploitpack

Exploit Pack -The next generation exploit framework

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

heros

IFDS/IDE Solver for Soot and other frameworks

Java-Deserialization-Scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pic

pictures

sliver

Adversary Emulation Framework

wh1t3p1g

wh1t3p1g.github.io