EkiXu / WAFManisLinks
☆159Updated last year
Alternatives and similar repositories for WAFManis
Users that are interested in WAFManis are comparing it to the libraries listed below
Sorting:
- 《深入JDBC安全:特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆524Updated 3 weeks ago
- CTF-Java-Gadget专注于收集CTF中Java赛题的反序列化片段☆272Updated 11 months ago
- 自动化的 Python 沙箱逃逸 payload bypass 框架 / Automated Python Sandbox Escape Payload Bypass Framework☆98Updated 11 months ago
- 一款基于污点分析的PHP扫描工具,能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径,同时支持单独对函数的扫描。☆157Updated 8 months ago
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆538Updated 3 weeks ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆536Updated 9 months ago
- 闭源系统半自动漏洞挖掘工具,针对 jar/war/zip 进行静态代码分析,输出从source到sink的可达路径。LLM将验证路径可达性,并根据上下文给出该路径可信分数☆484Updated 5 months ago
- 历史漏洞的细节以及利用方法汇总收集☆163Updated last year
- 【Hello-CTF labs】一个想帮你收集所有RCE技巧的靶场。☆274Updated 7 months ago
- GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)☆458Updated 10 months ago
- 《Go语言安全-只有Go安全才能拯救地球》Only Golang Security Can Save The Earth.☆191Updated 3 weeks ago
- exec BashCommand with only ! # $ ' ( ) < \ { } just 10 charset used in Bypass or CTF☆255Updated last year
- 基于实战沉淀下的各种弱口令字典☆134Updated 5 years ago
- [漏洞复现] 全球首款利用PHP默认环境(XAMPP)的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP。☆156Updated last year
- IoT_Vulnerability_Wiki IoT漏洞知识库☆202Updated 11 months ago
- 《深入理解WEB漏洞之SSRF漏洞》Server-Side Request Forgery.☆62Updated last year
- 【两万字原创】零基础学fastjson漏洞(基础篇),公众号:追梦信安☆183Updated last year
- 一个 CVE 漏洞预警知识库,无 exp/poc,部分包含修复方案。A knowledge base of CVE security vulnerability, no PoCs/exploits.☆150Updated 3 weeks ago
- 腾讯云黑客松 - 智能渗透挑战赛☆171Updated last week
- 一款轻量级匹配Sink点的代码审计扫描器,为了帮助红队过程中快速代码审计的小工具☆397Updated last year
- WPS Office RCE On 2023-08-10☆258Updated 2 years ago
- Extract website information from Vue☆282Updated 2 years ago
- JavaWeb漏洞审计工具,构建方法调用链并模拟栈帧进行分析☆333Updated 2 years ago
- 云原生安全资料库☆157Updated 3 months ago
- 此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现,POC已通过nuclei或xray武器化,绝大部分为自复现并自验过,本项目旨在为网络安全爱好者们提供一点参考资料,可供个人研究使用,共勉☆308Updated last year
- 让"WAF绕过"变得简单☆432Updated 10 months ago
- 对于安全学习的一些总结,更新ing,期待 Fork & Star!☆333Updated last year
- ☆28Updated 10 months ago
- javaDeserializeLabs☆70Updated 2 years ago
- dotnet 反序列化学习笔记☆511Updated 2 years ago