Security & Development
☆271Oct 5, 2023Updated 2 years ago
Alternatives and similar repositories for notes
Users that are interested in notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,389Dec 16, 2022Updated 3 years ago
- 自己学习java安全的一些总结，主要是安全审计相关☆1,695Jan 5, 2022Updated 4 years ago
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,693Mar 14, 2024Updated 2 years ago
- 个人域渗透学习笔记☆1,803Feb 7, 2020Updated 6 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,405Jan 18, 2022Updated 4 years ago
- 分享几个直接可用的内存马，记录一下学习过程中看过的文章☆979Mar 23, 2022Updated 4 years ago
- A collection of pentest and development tips☆1,126May 26, 2022Updated 3 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- 渗透红线Checklist☆457Jun 20, 2023Updated 2 years ago
- Java web common vulnerabilities and security code which is base on springboot and spring security☆2,658Dec 2, 2024Updated last year
- 免杀技术大杂烩---乱拳也打不死老师傅☆1,094Mar 29, 2021Updated 4 years ago
- 源代码漏洞の审计☆828Jul 2, 2024Updated last year
- Burp suite 分块传输辅助插件☆2,026Feb 23, 2022Updated 4 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆366Jun 19, 2024Updated last year
- 域渗透脑图中文翻译版☆280Sep 18, 2021Updated 4 years ago
- tomcat使用了自带session同步功能时，不安全 的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆212May 19, 2020Updated 5 years ago
- 总结了20+.Net反序列化文章，持续更新☆749Apr 3, 2024Updated last year
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- 红队基础设施自动 化部署工具☆852Jan 4, 2023Updated 3 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- Cobalt Strike系列☆2,417Dec 3, 2023Updated 2 years ago
- 《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.☆2,874Aug 4, 2023Updated 2 years ago
- CobaltStrike后渗透测试插件☆1,557Oct 28, 2021Updated 4 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- RMI 反序列化环境 一步步☆213Aug 31, 2020Updated 5 years ago
- mysql注入,bypass的一些心得☆1,327Jun 25, 2024Updated last year
- Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…☆932Jan 7, 2026Updated 2 months ago
- SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list☆6,124Mar 10, 2021Updated 5 years ago
- A CAT called tabby ( Code Analysis Tool )☆1,641Jan 17, 2026Updated 2 months ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,014May 21, 2024Updated last year
- A powerful browser crawler for web vulnerability scanners☆3,020Mar 11, 2025Updated last year
- solana sniper bot solana sniper bot solana sniper bot solana sniper bot solana sniper bot https://t.me/av1080trading☆1,934Jan 30, 2026Updated last month
- 主流供应商的一些攻击性漏洞汇总☆808Nov 8, 2021Updated 4 years ago
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- Share Things Related to Java - Java安全漫谈笔记相关内容☆1,997Apr 9, 2025Updated 11 months ago
- about CobaltStrike☆150Dec 1, 2023Updated 2 years ago
- 高危漏洞精准检测与深度利用框架☆1,458Jan 8, 2023Updated 3 years ago
- 本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。☆2,808Aug 7, 2022Updated 3 years ago