一个基于Codeql规则的go靶场
☆40Feb 19, 2025Updated last year
Alternatives and similar repositories for GoSecCode-codeql
Users that are interested in GoSecCode-codeql are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rust 重构的 sRDI☆18Sep 9, 2024Updated 2 years ago
- CVE-2026-31431 容器逃逸☆27May 2, 2026Updated 5 months ago
- 一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具☆398Oct 6, 2024Updated 2 years ago
- Basic Psexec clone, but in golang.☆17Jul 2, 2022Updated 4 years ago
- 适用于Node.js环境下的Suo5内存马.☆52Mar 20, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一个 使用golang编写的程序，用于测试Java应用是否受到rmi加载远程类进行代码执行的影响☆24Oct 11, 2023Updated 3 years ago
- java-web 自动化鉴权绕过☆381Apr 3, 2025Updated last year
- 弱口令扫描SDK,可作为CLI单独调用☆39Dec 11, 2025Updated 10 months ago
- 检测查杀java内存马☆129Dec 5, 2023Updated 2 years ago
- golang 实现的windows and linux 端口复用工具。☆311Jan 30, 2024Updated 2 years ago
- TL-NodeJsShell 是一个为安全专业人员和渗透测试人员设计的综合性 WebShell 管理平台。它提供了一个现代化的 Web 界面，用于管理基于 Node.js 的 Shell，具有内存马注入、命令执行、文件管理和代理支持等高级功能。☆89Dec 12, 2025Updated 10 months ago
- 一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出(dumpall Golang重构版)☆21Aug 11, 2026Updated 2 months ago
- 小蓝本(https://www.xiaolanben.com/) 爬虫的 h_sign 签名JSRPC实现。nodejs 补环境也实现了☆13Apr 30, 2024Updated 2 years ago
- A Go library for generating Java deserialization payloads.☆151Sep 9, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 遥知是一款Web日志分析工具，适用于Nginx和Apache的请求日志分析。☆20Sep 10, 2026Updated last month
- 检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare☆81Oct 23, 2023Updated 3 years ago
- powershell 混淆 生成工具☆24Nov 10, 2024Updated last year
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆28Sep 28, 2025Updated last year
- JAVA 安全靶场，IAST 测试用例，JAVA漏洞复现，代码审计，SAST测试用例，安全扫描（主动和被动），JAVA漏洞靶场，RASP测试用例 ； Java Security Testbed, IAST Test Cases, Java Vulnerability R…☆299Apr 29, 2026Updated 6 months ago
- ☆79Nov 22, 2024Updated last year
- Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)☆118Aug 11, 2026Updated 2 months ago
- riverPass 是一个用Go编写的瑞数WAF绕过工具。它利用了WebSocket协议，将请求发送的自身浏览器中，从而绕过了瑞数WAF的检测。☆238Oct 18, 2024Updated 2 years ago
- 帆软bi反序列化漏洞利用工具☆199Mar 23, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and…☆286Aug 20, 2024Updated 2 years ago
- Leveraging LLM to generate Java deserialization chains☆95Mar 12, 2026Updated 7 months ago
- 强化学习 + 端口扫描☆122Feb 23, 2025Updated last year
- https://github.com/CocoHall/xiaSql 的魔改版☆14Sep 24, 2025Updated last year
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可 达性，并根据上下文给出该路径可信分数☆507Jan 12, 2026Updated 9 months ago
- Java Chains 插件编写 demo☆14Aug 9, 2026Updated 2 months ago
- WeblogicScan一键检测☆126May 6, 2024Updated 2 years ago
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- 集成了截图 键盘记录 剪贴版功能，用于网络限制场景下的信息搜集☆89May 18, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新☆151Apr 24, 2024Updated 2 years ago
- 本项目是一个远程控制应用，使用 Golang 开发，允许用户通过 Web 界面远程控制和屏幕监控其他计算机。主要功能包括屏幕共享、鼠标和键盘控制以及键盘记录。☆489Jan 30, 2026Updated 9 months ago
- Inject your Native AOT assembly through the dllmain entry and perform internal function calling within the injected context☆11Apr 28, 2024Updated 2 years ago
- 某软最新公开gadgegt,新加入不出网利用。☆89Sep 6, 2024Updated 2 years ago
- kill AV/EDR☆17Jun 9, 2023Updated 3 years ago
- 一个半自动化springboot打点工具，内置目前springboot所有漏洞☆790Sep 30, 2025Updated last year
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago