开发和安全和运营：DevSecOps-Software development (Dev) and Security (Sec) and IT operations (Ops).
☆28Apr 13, 2024Updated last year
Alternatives and similar repositories for DevSecOps
Users that are interested in DevSecOps are comparing it to the libraries listed below
Sorting:
- 安全方向知识点(包含web攻防、java攻防、企业安全、内网/域、提权、免杀)☆46Dec 25, 2024Updated last year
- Tao（道）一款用于java语言函数调用关系生成的工具，致力于提高java代码审计效率。☆11Jul 2, 2024Updated last year
- ☆10Jul 21, 2022Updated 3 years ago
- PassiveScan-被动扫描之巅☆69Nov 17, 2025Updated 3 months ago
- 《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.☆55Oct 29, 2022Updated 3 years ago
- 《深入理解SAST静态应用安全测试》Static Application Security Testing.☆390Sep 28, 2025Updated 4 months ago
- Java安全学习历程☆41Jul 7, 2023Updated 2 years ago
- 基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析☆39Oct 26, 2021Updated 4 years ago
- Android Security Bug Queries for CheckMarx☆20Sep 13, 2022Updated 3 years ago
- ☆21Mar 25, 2022Updated 3 years ago
- try to determine if a host is vulnerable to SpringShell CVE‐2022‐22965 and CVE‐2022‐22963☆23Apr 1, 2022Updated 3 years ago
- 网络安全技术博客收集，RSS订阅收集☆18Oct 18, 2022Updated 3 years ago
- Java安全路上的学习笔记☆84Feb 24, 2023Updated 3 years ago
- 静态分析及代码审计自动化相关资料收集☆298Jul 29, 2022Updated 3 years ago
- 安全运营部署指南（wazuh部署指南）☆152Jan 3, 2024Updated 2 years ago
- GitHub Action安全工具，可以将Action Secrets还原拿到明文，用于证明Secrets并不是绝对的安全。（测试通过，放心使用，再有问题来issues区锤我...）☆24Sep 12, 2022Updated 3 years ago
- Java Web安全开发规范☆28Oct 10, 2023Updated 2 years ago
- codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)☆205Mar 19, 2022Updated 3 years ago
- iOS逆向开发：砸壳ipa☆36Dec 9, 2024Updated last year
- SpringBoot获取被星号脱敏的密码的明文☆57Dec 13, 2021Updated 4 years ago
- 编译原理学习代码仓库☆23Jan 17, 2022Updated 4 years ago
- 这是一份网络安全从业者自保指南。本项目整理了近年来中国大陆涉及《网络安全法》、《数据安全法》、《个人信息保护法》的违法违规事件。用于帮助网络运营者、网络安全从业者以及相关从业人员了解我国相关法律法规，避免在工作中触碰法律红线，做好自我保护。☆28May 11, 2023Updated 2 years ago
- CodeQL Java 全网最全的中文学习资料☆799Mar 18, 2022Updated 3 years ago
- 海康威视文件上传检测脚本，可getshell，漏洞检测☆30Jun 6, 2023Updated 2 years ago
- 就是一个练习RMI反序列化的最简单环境☆30Jan 8, 2022Updated 4 years ago
- 《iOS安全测试与安全研究》☆195Oct 11, 2023Updated 2 years ago
- Some script and useful tool for Attack & Defense CTF☆29Jun 27, 2018Updated 7 years ago
- 关于AWD的一些思路、工具、文档☆36Sep 16, 2022Updated 3 years ago
- 《ASPX安全-只有ASPX安全才能拯救.NET》Only ASPX Security Can Save The NET.☆37Oct 20, 2022Updated 3 years ago
- Resources from Jamal & Giuliana's presentation on reserving bytecode into bounties for Jira and Confluence Plugins [BSides Canberra and K…☆21Nov 7, 2025Updated 3 months ago
- 对于安全学习的一些总结，更新ing，期待 Fork & Star！☆341Dec 26, 2023Updated 2 years ago
- RyzeSCA 是M-SEC社区一款强化 DevSecOps 的软件成分分析工具，能在软件开发过程中分析和管理开源组件的安全风险。☆38Dec 28, 2023Updated 2 years ago
- Super JSP Webshell☆89Nov 6, 2021Updated 4 years ago
- 针对于Spring框架的自动Java代码审计工具☆37Jan 24, 2022Updated 4 years ago
- 有需求做攻防对抗，买本书学习下常见技术，例子敲一敲☆228Jan 25, 2021Updated 5 years ago
- 代码审计总结☆85Sep 1, 2021Updated 4 years ago
- choose demo☆20Nov 6, 2025Updated 3 months ago
- 👶🏻😿 A zero-dependency network sniffer, written from scratch, that supports emulated and native cBPF. Runs on Linux, BSD, macOS and Win…☆13Nov 8, 2025Updated 3 months ago
- Ni-nuclei二开☆41Feb 24, 2024Updated 2 years ago