whw1sfb's starred repositories
zincsearch
ZincSearch . A lightweight alternative to elasticsearch that requires minimal resources, written in Go.
static-analysis
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
LLM4Decompile
Reverse Engineering: Decompiling Binary Code with Large Language Models
my-re0-k8s-security
:atom: [WIP] 整理过去的分享,从零开始的Kubernetes攻防 🧐
CSharpRepl
A command line C# REPL with syntax highlighting – explore the language, libraries and nuget packages interactively.
no-defender
A slightly more fun way to disable windows defender + firewall. (through the WSC api)
JDumpSpider
HeapDump敏感信息提取工具
jar-analyzer
Jar Analyzer - 一个JAR包分析工具,SCA漏洞分析,批量分析JAR包,方法调用关系搜索,字符串搜索,Spring组件分析,CFG程序分析,JVM栈帧分析,进阶表达式搜索,字节码指令级的动态调试分析,反编译JAR包一键导出,一键提取序列化数据恶意代码,一键分析BCEL字节码
File-Tunnel
Tunnel TCP connections through a file
jar-obfuscator
Jar Obfuscator - 一个 JAR/CLASS 字节码混淆工具,支持包名/类名/方法名/字段名/参数名引用分析和重命名混淆方式,支持字符串加密/整型异或混淆/垃圾代码花指令混淆/等方式,支持方法和字段的隐藏,支持 NATIVE 层的 JVMTI 代码加密,配置简单,文档教程齐全,容易上手
Ultraviolet-App
Example application of Ultraviolet which can be deployed in production.
Java-Js-Engine-Payloads
Java Js Engine Payloads All in one
Dubbo-Scan
一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。
HackingFernFlower
2023白帽补天大会部分代码
Bypass_JVM_Verifier
Bypass JVM Class ByteCode Verifier , 对抗反编译器
ClazzSearcher
一款使用Yaml定义搜索规则来搜索Class的工具
utf-8-overlong-encoding
抽离出 utf-8-overlong-encoding 的序列化逻辑,实现 2 3 字节加密序列化数组
TcpServerChannelRce
一款基于James Forshaw的.NET Remoting反序列化工具升级版在TypeFilterLevel.Low模式无文件payload任意代码执行poc的开发心得