brant-ruan / slides-and-papers
slides and papers from (or partly from) Bonan
☆22Updated last year
Alternatives and similar repositories for slides-and-papers:
Users that are interested in slides-and-papers are comparing it to the libraries listed below
- JVM runtime class loading protection agent.（JVM类加载保护agent）☆48Updated 3 years ago
- 一些Java RASP demo☆11Updated 5 years ago
- Java After-Deserialization Attack☆79Updated 3 years ago
- Dependencies with Log4j2 Checklist☆35Updated 3 years ago
- Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…☆52Updated 3 years ago
- jre8u20 gadget☆33Updated 3 years ago
- ☆28Updated 4 years ago
- ☆58Updated 4 years ago
- ☆32Updated 4 years ago
- log4j-patch 修改字节码实现补丁防御☆20Updated 3 years ago
- 收集规则☆30Updated 2 years ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆49Updated 2 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆69Updated 4 years ago
- 宽字节安全团队的博客☆30Updated 3 years ago
- ☆33Updated 2 years ago
- 记录调试分析ysoserial系列的学习过程，主要包含手动构造的一些poc，便于加深对漏洞和工具的理解☆30Updated 4 years ago
- POC for leaking java version through file and ftp protocols☆24Updated 4 years ago
- Spring Boot Actuator + Spring Cloud Vul Env☆19Updated 5 years ago
- 阿里云先知社区xss挑战☆22Updated 7 years ago
- ☆82Updated 3 years ago
- Low-level RASP: Protecting Applications Implemented in High-level Programming Languages☆58Updated last year
- CVE-2020-2551 POC to use in Internet☆21Updated 4 years ago
- ☆16Updated 4 years ago
- Scripts that can generate gopher payload.☆12Updated 4 years ago
- ☆42Updated 5 years ago
- CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞☆35Updated 5 years ago
- fastjson-1.2.61-RCE☆33Updated 5 years ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Updated 5 years ago
- 处于原型阶段☆20Updated 3 years ago