neargle / cloud_native_security_test_case
🌶 一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]
☆80Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for cloud_native_security_test_case
- 总结了免杀webshell的方法论☆48Updated 4 years ago
- 基于JVM-Sandbox实现RASP安全监控防护☆51Updated last year
- 分析验证安全漏洞，仅供学习☆21Updated 4 years ago
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆213Updated 4 years ago
- 又一款敏感文件泄漏检测工具☆106Updated 5 years ago
- blog☆1Updated 5 months ago
- ☆103Updated last year
- a dnslog platform with tornado, less code.☆23Updated 4 years ago
- ☆62Updated 4 years ago
- 基于AST的JSONP劫持漏洞自动化挖掘☆94Updated 4 years ago
- log4j2-vaccine☆85Updated 2 years ago
- ☆143Updated 6 years ago
- 又一个Java Web代码审计工具☆99Updated 6 years ago
- codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)☆208Updated 2 years ago
- fastjson 1.2.68 版本 autotype bypass☆140Updated 2 years ago
- Writeup and environment for XCTF2021Final-Dubbo☆45Updated 3 years ago
- java 漏洞平台包含各种CVE☆23Updated 2 years ago
- 一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…☆122Updated 2 years ago
- RememberMe Padding Oracle Vulnerability RCE☆71Updated 5 years ago
- struts2 漏洞环境源代码☆75Updated 2 years ago
- springboot getRequestURI acl bypass☆37Updated 4 years ago
- 个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget有效性的那么一个小工具。☆60Updated 4 years ago