no-one-sec / github-action-secrets-stealerLinks
GitHub Action安全工具,可以将Action Secrets还原拿到明文,用于证明Secrets并不是绝对的安全。(测试通过,放心使用,再有问题来issues区锤我...)
☆24Updated 3 years ago
Alternatives and similar repositories for github-action-secrets-stealer
Users that are interested in github-action-secrets-stealer are comparing it to the libraries listed below
Sorting:
- CodeQL 寻找 JNDI利用 Lookup接口☆165Updated 3 years ago
- 分享在建设安全管理体系、ISO27001、等级保护、安全评审过程中的点点滴滴☆23Updated 7 years ago
- Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053☆37Updated 3 years ago
- 常用安全工具 docker镜像 自动更新仓库☆65Updated 3 years ago
- Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …☆49Updated 3 years ago
- 卸载冰蝎内存马☆68Updated 4 years ago
- jre8u20 gadget☆34Updated 4 years ago
- Celestion 是一个无回显漏洞测试辅助平台,平台使用flask编写,提供DNSLOG,HTTPLOG等功能。 (界面懒得弄,后续有需要再说)。☆30Updated 2 years ago
- 日志分析库,nuclei 的另一种用法☆33Updated 3 years ago
- CVE-2021-43297 POC,Apache Dubbo<= 2.7.13时可以实现RCE☆38Updated 3 years ago
- Java RMI反序列化漏洞插件☆49Updated 4 years ago
- ☆46Updated 4 years ago
- DVPNET 公开漏洞知识库☆93Updated 4 years ago
- Apereo CAS exploit tool☆58Updated 3 years ago
- <a href="sumsec.me"><img src="https://readme-typing-svg.demolab.com?font=Fira+Code&size=24&pause=1000&color=FDFDFD&background=13797800&ce…☆54Updated this week
- 互联网侧调试访问者信息的工具☆34Updated last year
- springboot getRequestURI acl bypass☆37Updated 5 years ago
- 解答开发关于安全漏洞的常见问题☆41Updated 5 years ago
- CobatStrike-Script, Beacon上线,微信实时推送!☆43Updated 5 years ago
- 一些结合第三方组件的Fastjson POC,在1.2.48以后版本中陆续被添加至黑名单。☆56Updated 6 years ago
- SMTP Netcat , test SMTP protocol☆105Updated 3 years ago
- CloudSecWiki is a cloud security oriented knowledge base maintained by HuoCorp.☆51Updated 2 years ago
- 清除基于java agent木马☆80Updated 4 years ago
- MysqlHoneypot☆23Updated 3 years ago
- 宽字节安全团队的博客☆31Updated 4 years ago
- 一个LDAP请求监听器,摆脱dnslog平台和java☆34Updated 2 years ago
- lite version of gobuster. Only subdomain brute. 内网轻量化子域名爆破工具☆44Updated 4 years ago
- e-mesaage <=4.15 后台jar包上传exp☆47Updated 6 years ago
- 该项目是通过go语言实现防止rmi利用被反置的问题。☆44Updated 4 years ago
- ☆50Updated 3 years ago