东方隐侠团队出品，代码审计skill
☆137Feb 25, 2026Updated 5 months ago
Alternatives and similar repositories for skill-dfyx_code_security_review
Users that are interested in skill-dfyx_code_security_review are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 东方隐侠安全团队 AI Agent Skills大集合☆52Mar 22, 2026Updated 4 months ago
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆993Jun 16, 2026Updated last month
- Claude Code plugin for Java JAR security audit — 基于 jar-analyzer 的 Claude Code 安全审计插件，构建数据库，AI 深入分析☆138Mar 20, 2026Updated 4 months ago
- ☆849Feb 13, 2026Updated 5 months ago
- 一些总结出来的gadget的flow，后续合适和加入新的flow☆68Dec 6, 2025Updated 8 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆386Mar 25, 2026Updated 4 months ago
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆594Feb 7, 2026Updated 6 months ago
- 微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。☆376Apr 3, 2026Updated 4 months ago
- 利用代理驱动绕过JDBC Attack检测☆145Jun 15, 2025Updated last year
- 让fscan再次伟大☆364Jun 18, 2026Updated last month
- aboutSecurity project skill finder / dict finder / exp finder, auto suggest and team knowledge base.☆27Jul 17, 2026Updated 3 weeks ago
- 一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具☆402Oct 6, 2024Updated last year
- ☆23Apr 16, 2026Updated 3 months ago
- 哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。☆175Oct 8, 2024Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 面向移动安全分析场景的 6 阶段总控 Skill。用于统一调度 APK 静态侦察、流量与代码对齐、SO/JNI 深度分析、加密与漏洞综合分析、验证设计与报告交付流程。支持 JADX MCP、Burp/Yakit MCP、IDA/Ghidra MCP。☆137Jun 30, 2026Updated last month
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆576Apr 3, 2026Updated 4 months ago
- ☆180Jan 29, 2026Updated 6 months ago
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆289Jul 17, 2025Updated last year
- Linux 安全应急响AI应检查Skill，基于 https://github.com/sun977/Linuxgun 开发☆39Feb 26, 2026Updated 5 months ago
- 后渗透信息/密码/凭证收集工具☆307May 7, 2025Updated last year
- GodzillaNodeJsPayload☆171Dec 10, 2025Updated 8 months ago
- ghost-bits-encoder 是一个面向 Woodpecker 的辅助插件，围绕 Ghost Bits / Unicode 高位包装思路，提供通用编解码、JSON 相关编码、URL 相关编码以及若干专项辅助能力。☆55May 15, 2026Updated 2 months ago
- Java bytecode line number restoration tool☆144Aug 31, 2025Updated 11 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件☆377Jun 7, 2024Updated 2 years ago
- burp手工检测fastjson辅助☆88Mar 4, 2024Updated 2 years ago
- ASP & ASP.NET WebShell Bypass☆72Jan 4, 2026Updated 7 months ago
- xxl-job内存马☆232Jan 26, 2025Updated last year
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆132Oct 12, 2024Updated last year
- JNDI在java高版本的利用工具,FUZZ利用链☆607Updated this week
- 在Java安全学习过程中的笔记和代码☆116Aug 2, 2026Updated last week
- 检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare☆80Oct 23, 2023Updated 2 years ago
- net-audit-skills☆51Jun 1, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- AITTAK 是一个特制的红队AI中转站平台，部署在客户端与 AI API 上游之间，用于记录请求行为、通过监控用户Prompt及工具调用结果检测敏感信息泄露、以及通过在SSE注入工具调用实现任意命令执行。☆49May 19, 2026Updated 2 months ago
- AI 驱动的后渗透综合管理平台，深度集成 LLM Agent，开箱即用。☆277Updated this week
- 🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sink…☆786Mar 14, 2026Updated 4 months ago
- 在Android Studio上搭建一套2026年最新的APP渗透环境，文章从去年年底开始构建共计耗时一个月（中间因为Android某些版本兼容性推翻了几次），这篇文章发出来了就是全部成功了🌟。☆112Jun 12, 2026Updated last month
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆465Jan 12, 2025Updated last year
- Leveraging LLM to generate Java deserialization chains☆89Mar 12, 2026Updated 4 months ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆184Apr 17, 2024Updated 2 years ago