Alternatives and similar repositories for writeups

Users that are interested in writeups are comparing it to the libraries listed below

• pyn3rd / my-presentation-slide
  ☆101Updated 2 years ago
• SecurityCN / Vulnerability-analysis
  ☆62Updated 5 years ago
• Ramos-dev / R9000
  ☆57Updated 5 years ago
• zhutougg / Awesome-Intranet_pentest_tool
  ☆80Updated 5 years ago
• qiyeboy / kill_webshell_detect
  总结了免杀webshell的方法论
  ☆48Updated 5 years ago
• Ruil1n / after-deserialization-attack
  Java After-Deserialization Attack
  ☆79Updated 4 years ago
• bit4woo / Java_deserialize_vuln_lab
  Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
  ☆87Updated 7 years ago
• tobechenghuai / Shiro_721_Padding_Oracle_RCE
  Shiro_721 exp 纯手工实现Padding Oracle整个过程
  ☆67Updated 6 years ago
• gitrobtest / Java-Security
  Java Security Documents
  ☆81Updated 6 years ago
• QAX-A-Team / redis_lua_exploit
  ☆146Updated 7 years ago
• attacker2001 / PT-Environment
  Local penetration test experimental environment
  ☆33Updated 6 years ago
• fnmsd / ChunkedHTTPAdapter
  参考《利用分块传输吊打所有WAF》修改的requests的Adapter
  ☆98Updated 7 years ago
• boy-hack / bugbounty-cheatsheet
  A list of interesting payloads, tips and tricks for bug bounty hunters.
  ☆24Updated 6 years ago
• codeplutos / Conference
  ☆28Updated 6 years ago
• jas502n / fastjson-1.2.58-rce
  fastjson-1.2.58-rce with h2 database
  ☆34Updated 6 years ago
• l3m0n / vtest
  用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
  ☆23Updated 6 years ago
• QAX-A-Team / SerialWriter
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆104Updated 7 years ago
• guimaizi / testing_wave
  ☆59Updated 5 years ago
• codeplutos / MySQL-JDBC-Deserialization-Payload
  MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload
  ☆13Updated 6 years ago
• kingkaki / Exploit-scripts
  存放一些自己写过的漏洞利用脚本
  ☆48Updated 6 years ago
• guimaizi / binary_security
  ☆32Updated 5 years ago
• shellsec / Knowledge-Base
  Knowledge Base 慢雾安全团队知识库
  ☆29Updated 6 years ago
• hex0wn / learn-java-bug
  ☆73Updated 3 years ago
• jas502n / kibana-RCE
  kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609
  ☆89Updated 6 years ago
• LeadroyaL / java_xxe_2019
  总结了一下2019年在JVM环境中使用XXE攻击的知识
  ☆58Updated 6 years ago
• jas502n / fastjson-RCE
  fastjson-1.2.47
  ☆67Updated 6 years ago
• LFYSec / Tomcat-AJP-EXP
  Java version of Tomcat-AJP-EXP, for practice
  ☆42Updated 5 years ago
• QAX-A-Team / Papers
  Papers
  ☆34Updated 6 years ago
• threedr3am / FindClassInJars
  个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。
  ☆60Updated 5 years ago
• verctor / nexus_rce_CVE-2019-7238
  Some debug notes and exploit(not blind)
  ☆39Updated 6 years ago