Security & Development
☆271Oct 5, 2023Updated 2 years ago
Alternatives and similar repositories for notes
Users that are interested in notes are comparing it to the libraries listed below
Sorting:
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,389Dec 16, 2022Updated 3 years ago
- 自己学习java安全 的一些总结，主要是安全审计相关☆1,694Jan 5, 2022Updated 4 years ago
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,689Mar 14, 2024Updated last year
- 个人域渗透学习笔记☆1,801Feb 7, 2020Updated 6 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,404Jan 18, 2022Updated 4 years ago
- 渗透红线Checklist☆449Jun 20, 2023Updated 2 years ago
- 分享几个直接可用的内存马，记录一下学习过程中看过的文章☆975Mar 23, 2022Updated 3 years ago
- Java web common vulnerabilities and security code which is base on springboot and spring security☆2,649Dec 2, 2024Updated last year
- 源代码漏洞の审计☆828Jul 2, 2024Updated last year
- A collection of pentest and development tips☆1,125May 26, 2022Updated 3 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆366Jun 19, 2024Updated last year
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- 总结了20+.Net反序列化文章，持续更新☆748Apr 3, 2024Updated last year
- Cobalt Strike系列☆2,413Dec 3, 2023Updated 2 years ago
- CobaltStrike后渗透测试插件☆1,554Oct 28, 2021Updated 4 years ago
- 免杀技术大杂烩---乱拳也打不死老师傅☆1,094Mar 29, 2021Updated 4 years ago
- 域渗透脑图中文翻译版☆280Sep 18, 2021Updated 4 years ago
- Burp suite 分块传输辅助插件☆2,022Feb 23, 2022Updated 4 years ago
- about CobaltStrike☆150Dec 1, 2023Updated 2 years ago
- A powerful browser crawler for web vulnerability scanners☆3,016Mar 11, 2025Updated 11 months ago
- Hyuga is a tool for monitoring Out-of-Band (OOB) traffic, supporting DNS, HTTP, LDAP, RMI, and DNS-Rebinding。🪤☆538Dec 27, 2025Updated 2 months ago
- Behinder3.0 Beta4 源码（Decompile and Fixed）☆207Sep 1, 2020Updated 5 years ago
- Java RCE 回显测试代码☆1,016Oct 15, 2020Updated 5 years ago
- 红队基础设施自动化部署工具☆852Jan 4, 2023Updated 3 years ago
- ☆131Jun 17, 2022Updated 3 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- 主流供应商的一些攻击性漏洞汇总☆809Nov 8, 2021Updated 4 years ago
- PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist☆663Feb 24, 2021Updated 5 years ago
- Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…☆929Jan 7, 2026Updated last month
- A CAT called tabby ( Code Analysis Tool )☆1,637Jan 17, 2026Updated last month
- mysql注入,bypass的一些心得☆1,326Jun 25, 2024Updated last year
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,012May 21, 2024Updated last year
- 各种工具指纹收集分享☆529Nov 3, 2021Updated 4 years ago
- Share Things Related to Java - Java安全漫谈笔记相关内容☆1,991Apr 9, 2025Updated 10 months ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆728Mar 21, 2022Updated 3 years ago
- 增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持☆968Jun 16, 2024Updated last year
- 《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.☆2,872Aug 4, 2023Updated 2 years ago
- 本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。☆2,807Aug 7, 2022Updated 3 years ago