EtherDream / web-frontend-magicView external linksLinks
#前端黑魔法# 整理
☆808Oct 16, 2021Updated 4 years ago
Alternatives and similar repositories for web-frontend-magic
Users that are interested in web-frontend-magic are comparing it to the libraries listed below
Sorting:
- Service Worker 安全探索☆74Nov 5, 2018Updated 7 years ago
- A front-end CDN based on ServiceWorker☆1,007Jun 7, 2022Updated 3 years ago
- 使用 iptables 防止端口扫描☆841Jan 14, 2023Updated 3 years ago
- Web 端口敲门的奇思妙想☆273Oct 22, 2020Updated 5 years ago
- An online proxy based on ServiceWorker☆9,359Mar 31, 2024Updated last year
- A Java runtime information-gathering tool which uses the Java Attach API for information acquisition☆204Apr 26, 2021Updated 4 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆212May 19, 2020Updated 5 years ago
- ☆835Jun 7, 2022Updated 3 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆458Mar 24, 2022Updated 3 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆167Apr 5, 2019Updated 6 years ago
- procfs-based PHP sandbox bypass☆133Sep 19, 2018Updated 7 years ago
- flash 劫持轮子，CSRF，劫持，跳转，swf 有需求可以提issues ，src挖掘,劫持response☆86Nov 9, 2019Updated 6 years ago
- a simple tool to detect potential security threat in php code☆317Sep 9, 2024Updated last year
- 🇨🇳 《JavaScript 二十年》中文版☆4,248Aug 24, 2022Updated 3 years ago
- A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.☆754Dec 2, 2022Updated 3 years ago
- 用于记录分享一些有趣的案例☆867Jan 10, 2022Updated 4 years ago
- ☆131Jun 17, 2022Updated 3 years ago
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆217Aug 17, 2017Updated 8 years ago
- ☆111Dec 26, 2019Updated 6 years ago
- 🍨 一个简洁到极致的单曲播放器☆20Apr 20, 2024Updated last year
- 总结了20+.Net反序列化文章，持续更新☆747Apr 3, 2024Updated last year
- 分享在前端开发中，你不知道的JavaScript、CSS和HTML趣味知识，增加你的知识面。☆963Jan 4, 2023Updated 3 years ago
- CVE-2019-2725 命令回显☆436May 8, 2023Updated 2 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,200Oct 17, 2023Updated 2 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆868Jul 21, 2019Updated 6 years ago
- ☆1,723Jan 15, 2021Updated 5 years ago
- 赫蹏（hètí）是专为中文内容展示设计的排版样式增强。它基于通行的中文排版规范而来，可以为网站的读者带来更好的文章阅读体验。☆6,594Aug 31, 2025Updated 5 months ago
- Some payloads of JNDI Injection in JDK 1.8.0_191+☆484Dec 9, 2020Updated 5 years ago
- 为应对CTF比赛而搭建的各种环境☆156May 9, 2020Updated 5 years ago
- xray社区高级版证书生成，仅供学习研究，正常使用请支持正版。removed due to Chaitin requirements & support to version 1.4.4 & learning purpose☆443Nov 11, 2020Updated 5 years ago
- Hunting Bugs for Fun and Profit☆272Jul 29, 2020Updated 5 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- 通过 Redis 主从写出无损文件☆719May 25, 2020Updated 5 years ago
- BCS（北京网络安全大会）2019 红队行动会议重点内容☆821Sep 4, 2019Updated 6 years ago
- POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC☆357Mar 12, 2020Updated 5 years ago
- ☆119Mar 21, 2020Updated 5 years ago
- Enumeration sub domains(枚举子域名)☆1,065Dec 1, 2021Updated 4 years ago
- Node.js 应用线上/线下故障、压测问题和性能调优指南手册（一期更新结束）☆1,754Jun 17, 2019Updated 6 years ago