🌶 一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]
☆81Jul 23, 2021Updated 4 years ago
Alternatives and similar repositories for cloud_native_security_test_case
Users that are interested in cloud_native_security_test_case are comparing it to the libraries listed below
Sorting:
- https://jira.atlassian.com/browse/JRASERVER-69793☆10Sep 16, 2019Updated 6 years ago
- ☆34Sep 19, 2022Updated 3 years ago
- ☆153Jun 24, 2019Updated 6 years ago
- k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.☆301Aug 30, 2021Updated 4 years ago
- dynamic crawler for web vulnerability scanner☆252Mar 4, 2020Updated 6 years ago
- ☆16Jan 5, 2021Updated 5 years ago
- CVE-2020-5398 - RFD(Reflected File Download) Attack for Spring MVC☆87Dec 15, 2022Updated 3 years ago
- Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…☆697Dec 25, 2023Updated 2 years ago
- tomcat使用了自带session同步功能时，不安全的配 置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆212May 19, 2020Updated 5 years ago
- 发信平台自动化部署☆65Jun 6, 2020Updated 5 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。☆14Jul 7, 2019Updated 6 years ago
- Java Security Documents☆81Sep 19, 2019Updated 6 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆11Apr 2, 2021Updated 4 years ago
- Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>☆267Jun 17, 2022Updated 3 years ago
- GreHack 2021 CodeQL for Java workshop☆73Nov 19, 2021Updated 4 years ago
- CatchMail can be used to find some email addresses!☆73May 22, 2023Updated 2 years ago
- 一个Mac下信息搜 集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项☆78Jul 21, 2020Updated 5 years ago
- ☆275Oct 28, 2021Updated 4 years ago
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆217Aug 17, 2017Updated 8 years ago
- A vulnerable application exposing Spring Boot Actuators☆123Feb 25, 2019Updated 7 years ago
- 参赛所用的sshop平台☆11Jun 26, 2018Updated 7 years ago
- 利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊☆125Jul 17, 2020Updated 5 years ago
- Spring Boot Actuator (jolokia) XXE/RCE☆324Jun 16, 2020Updated 5 years ago
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,690Mar 14, 2024Updated last year
- Exchange2010 authorized RCE☆157Dec 24, 2020Updated 5 years ago
- Tomcat基于动态注册Filter的无文件Webshell☆26Jun 20, 2020Updated 5 years ago
- 内存马Demo合集 memshell demo for java / php / python☆425May 31, 2021Updated 4 years ago
- jre8u20 gadget☆34May 23, 2021Updated 4 years ago
- When MVC magic turns black☆297Sep 4, 2020Updated 5 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- 知识星球《漏洞百出》最新 20条 Topic☆114Nov 30, 2021Updated 4 years ago
- Remote Command Execution Over Spark☆97Feb 21, 2026Updated 2 weeks ago
- ZKar is a Java serialization protocol analysis tool implement in Go.☆649Feb 15, 2025Updated last year
- 《云原生安全：攻防实践与体系构建》资料仓库☆780Feb 19, 2023Updated 3 years ago
- ☆27Mar 6, 2021Updated 5 years ago
- ☆835Jun 7, 2022Updated 3 years ago
- An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability☆469Sep 16, 2023Updated 2 years ago
- Cobalt Strike插件 - RDP日志取证&清除☆363Dec 23, 2019Updated 6 years ago