Deprecated: Please visit https://github.com/github/codeql instead.
☆82Apr 8, 2022Updated 4 years ago
Alternatives and similar repositories for SecurityQueries
Users that are interested in SecurityQueries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repo has been migrated to https://github.com/github/security-lab/tree/master/SecurityExploits☆254Nov 5, 2019Updated 6 years ago
- This repo has been migrated to https://github.com/github/security-lab/tree/master/CodeQL_Queries☆27Nov 8, 2019Updated 6 years ago
- A Java serializer in JavaScript☆80May 21, 2018Updated 8 years ago
- Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf☆59Apr 25, 2019Updated 7 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- PoC Exploit for AOSP UserDictionary Content Provider (CVE-2018-9375)☆21Mar 2, 2019Updated 7 years ago
- keynote I gave at GreHack 2019☆19Nov 17, 2019Updated 6 years ago
- This is the Pwn2Own 2017 Safari backup vul's exploit.☆116Mar 25, 2019Updated 7 years ago
- 一些Java RASP demo☆11Sep 26, 2019Updated 7 years ago
- PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)☆24Dec 1, 2018Updated 7 years ago
- Mogwai Java Management Extensions (JMX) Exploitation Toolkit☆173Jul 21, 2016Updated 10 years ago
- 漏洞复现记录☆11Jun 18, 2019Updated 7 years ago
- ☆11Jan 6, 2020Updated 6 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloads☆390Apr 16, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆34Sep 19, 2016Updated 10 years ago
- Java RMI enumeration and attack tool.☆750Sep 28, 2017Updated 9 years ago
- ☆17Oct 25, 2018Updated 8 years ago
- A static byte code analyzer for Java deserialization gadget research☆252Apr 17, 2017Updated 9 years ago
- Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.☆12Sep 30, 2018Updated 8 years ago
- Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018☆178Feb 7, 2024Updated 2 years ago
- Spring messaging STOMP protocol RCE☆113Apr 12, 2018Updated 8 years ago
- A few IDAPython scripts to generate class hierarchy diagrams from IDBs☆35Jan 10, 2012Updated 14 years ago
- bypass JEP290 RaspHook code☆63Sep 21, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The Outlook HTML Leak Test Project☆129May 12, 2018Updated 8 years ago
- ☆30Jan 4, 2018Updated 8 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆1,093Jun 15, 2021Updated 5 years ago
- Joern Workshops☆33Jan 16, 2025Updated last year
- Resources related to GitHub Security Lab☆1,637Jun 8, 2026Updated 4 months ago
- Expression generator for WebAssembly☆18Jul 6, 2018Updated 8 years ago
- POC for CVE-2021-1699☆16Mar 31, 2021Updated 5 years ago
- Java Message Exploitation Tool☆506Jul 6, 2022Updated 4 years ago
- S2-057 poc test☆13Aug 31, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro☆52Aug 5, 2013Updated 13 years ago
- 2 web tasks from ZeroNights HackQuest 2016☆49Mar 24, 2017Updated 9 years ago
- INACTIVE - http://mzl.la/ghe-archive - Framboise is a fuzzer for in-depth testing of WebAPIs.☆20Aug 8, 2017Updated 9 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- Fixed kgmacros to work with VMware kernel gdb stub☆17Feb 21, 2014Updated 12 years ago
- ☆12Apr 9, 2014Updated 12 years ago
- ☆73Jan 25, 2018Updated 8 years ago