whw1sfb's starred repositories
tailwindcss
A utility-first CSS framework for rapid UI development.
zincsearch
ZincSearch . A lightweight alternative to elasticsearch that requires minimal resources, written in Go.
static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
aliyundrive-webdav
阿里云盘 WebDAV 服务
my-re0-k8s-security
:atom: [WIP] 整理过去的分享,从零开始的Kubernetes攻防 🧐
LLM4Decompile
Reverse Engineering: Decompiling Binary Code with Large Language Models
no-defender
A slightly more fun way to disable windows defender + firewall. (through the WSC api)
JDumpSpider
HeapDump敏感信息提取工具
jar-analyzer
Jar Analyzer - 一个JAR包分析工具,批量分析JAR包搜索,方法调用关系搜索,字符串搜索,Spring组件分析,CFG分析,JVM Stack Frame分析,远程分析Tomcat,进阶表达式搜索,自定义SQL查询,字节码查看,字节码指令级的动态调试分析,命令行分析,反编译JAR包一键导出,一键提取序列化数据恶意代码
File-Tunnel
Tunnel TCP connections through a file
Ultraviolet-App
Example application of Ultraviolet which can be deployed in production.
Java-Js-Engine-Payloads
Java Js Engine Payloads All in one
jar-obfuscator
Jar Obfuscator - 一个 JAR/CLASS 字节码混淆工具,支持包名/类名/方法名/字段名/参数名引用分析和重命名混淆方式,支持字符串加密/整型异或混淆/垃圾代码花指令混淆/等方式,支持方法和字段的隐藏,支持 NATIVE 层的 JVMTI 代码加密,配置简单,文档教程齐全,容易上手
Dubbo-Scan
一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。
HackingFernFlower
2023白帽补天大会部分代码
Bypass_JVM_Verifier
Bypass JVM Class ByteCode Verifier , 对抗反编译器
utf-8-overlong-encoding
抽离出 utf-8-overlong-encoding 的序列化逻辑,实现 2 3 字节加密序列化数组
ClazzSearcher
一款使用Yaml定义搜索规则来搜索Class的工具
serial-builder
Library for manually creating Java serialization data.