brant-ruan / slides-and-papers
slides and papers from (or partly from) Bonan
☆22Updated last year
Alternatives and similar repositories for slides-and-papers:
Users that are interested in slides-and-papers are comparing it to the libraries listed below
- ☆32Updated 4 years ago
- JVM runtime class loading protection agent.（JVM类加载保护agent）☆48Updated 3 years ago
- ☆58Updated 4 years ago
- 收集规则☆30Updated 2 years ago
- Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Diffe…☆52Updated 3 years ago
- 一些Java RASP demo☆11Updated 5 years ago
- ☆28Updated 4 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- ☆33Updated 2 years ago
- jre8u20 gadget☆33Updated 3 years ago
- 宽字节安全团队的博客☆30Updated 3 years ago
- log4j-patch 修改字节码实现补丁防御☆20Updated 3 years ago
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆69Updated 4 years ago
- Spring Boot Actuator + Spring Cloud Vul Env☆19Updated 5 years ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆49Updated 2 years ago
- 处于原型阶段☆20Updated 3 years ago
- Java After-Deserialization Attack☆79Updated 3 years ago
- CVE-2019-0230 & s2-059 poc.☆35Updated 4 years ago
- 阿里云先知社区xss挑战☆22Updated 7 years ago
- 打CTF实在厌倦了找利用链，就知道一个fastjson的版本，一堆依赖找啊找，头都疼。为了解决这个烦恼，用了卓卓师傅的fastjson黑名单工具和库，自己改造了一下。☆32Updated 5 years ago
- CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process…☆25Updated 4 years ago
- ☆10Updated 4 years ago
- 手把手教你写IAST系列☆24Updated last year
- 就是一个练习RMI反序列化的最简单环境☆30Updated 3 years ago
- 记录调试分析ysoserial系列的学习过程，主要包含手动构造的一些poc，便于加深对漏洞和工具的理解☆30Updated 4 years ago
- 2020年~2021年 网站CMS、中间件、框架系统漏洞集合☆36Updated 4 years ago
- ☆16Updated 4 years ago
- ☆28Updated 5 years ago
- Dependencies with Log4j2 Checklist☆35Updated 3 years ago
- ☆46Updated 3 years ago