opensec-cn/chip external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

opensec-cn/chip

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/opensec-cn/chip)

Close

opensec-cn / chipView on GitHubMore

• External links
• Readme badge

a simple tool to detect potential security threat in php code

☆316Sep 9, 2024Updated last year

Alternatives and similar repositories for chip

Users that are interested in chip are comparing it to the libraries listed below

• fate0 / prvd

  View on GitHub
  PHP Runtime Vulnerability Detection
  ☆480May 25, 2019Updated 6 years ago
• myvyang / chromium_for_spider

  View on GitHub
  dynamic crawler for web vulnerability scanner
  ☆252Mar 4, 2020Updated 5 years ago
• l3m0n / Bypass_Disable_functions_Shell

  View on GitHub
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,198Oct 17, 2023Updated 2 years ago
• phith0n / code-breaking

  View on GitHub
  Code-Breaking Puzzles
  ☆292Apr 6, 2025Updated 10 months ago
• opensec-cn / vtest

  View on GitHub
  用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
  ☆866Jul 21, 2019Updated 6 years ago
• 0Kee-Team / JavaProbe

  View on GitHub
  A Java runtime information-gathering tool which uses the Java Attach API for information acquisition
  ☆204Apr 26, 2021Updated 4 years ago
• Nu1LCTF / n1ctf-2019

  View on GitHub
  ☆119Mar 21, 2020Updated 5 years ago
• SPuerBRead / HTMLSimilarity

  View on GitHub
  网页相似度判断：根据网页结构判断页面相似性 ，可用于相似度计算、越权检测等(Determine page similarity based on HTML page structure)
  ☆282Jul 27, 2019Updated 6 years ago
• phith0n / realworldctf

  View on GitHub
  My Real World CTF challenges
  ☆115Sep 19, 2019Updated 6 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆458Mar 24, 2022Updated 3 years ago
• wupco / weblogger

  View on GitHub
  针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具
  ☆742Jun 2, 2023Updated 2 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 3 years ago
• CHYbeta / Code-Audit-Challenges

  View on GitHub
  Code-Audit-Challenges
  ☆990Nov 17, 2018Updated 7 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆436May 8, 2023Updated 2 years ago
• l3m0n / whatweb

  View on GitHub
  更快速的进行Web应用指纹识别
  ☆170May 9, 2019Updated 6 years ago
• timwhitez / crawlergo_x_XRAY

  View on GitHub
  360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能
  ☆1,183Nov 10, 2021Updated 4 years ago
• AntSwordProject / ant_php_extension

  View on GitHub
  PHP 扩展, 用于 PHP-FPM、FastCGI、LD_PRELOAD等模式下突破 disabled_functions
  ☆106Sep 8, 2021Updated 4 years ago
• Mel0day / RedTeam-BCS

  View on GitHub
  BCS（北京网络安全大会）2019 红队行动会议重点内容
  ☆819Sep 4, 2019Updated 6 years ago
• fate0 / xmark

  View on GitHub
  A PHP7 extension that can hook most functions/classes and parts of opcodes
  ☆242Sep 17, 2021Updated 4 years ago
• wofeiwo / webcgi-exploits

  View on GitHub
  Multi-language web CGI interfaces exploits.
  ☆399Aug 22, 2022Updated 3 years ago
• wuppp / shiro_rce_exp

  View on GitHub
  Shiro RCE (Padding Oracle Attack)
  ☆148Nov 15, 2019Updated 6 years ago
• LeadroyaL / fastjson-blacklist

  View on GitHub
  ☆835Jun 7, 2022Updated 3 years ago
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,022Feb 23, 2022Updated 4 years ago
• Ridter / redis-rce

  View on GitHub
  Redis 4.x/5.x RCE
  ☆975Nov 30, 2021Updated 4 years ago
• LoRexxar / Kunlun-M

  View on GitHub
  KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。
  ☆2,379Jan 16, 2026Updated last month
• boy-hack / wooyun-payload

  View on GitHub
  从wooyun中提取的payload，以及burp插件
  ☆842Jun 17, 2022Updated 3 years ago
• loerting / cafecompare

  View on GitHub
  Java code comparison tool (jar / class)
  ☆341Jun 4, 2020Updated 5 years ago
• mm0r1 / exploits

  View on GitHub
  Pwn stuff.
  ☆1,805May 31, 2022Updated 3 years ago
• r35tart / Penetration_Testing_Case

  View on GitHub
  用于记录分享一些有趣的案例
  ☆866Jan 10, 2022Updated 4 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,016Oct 15, 2020Updated 5 years ago
• QAX-A-Team / WeblogicEnvironment

  View on GitHub
  Weblogic环境搭建工具
  ☆796Apr 23, 2020Updated 5 years ago
• c0ny1 / java-object-searcher

  View on GitHub
  java内存对象搜索辅助工具
  ☆823Sep 23, 2022Updated 3 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆258Oct 14, 2020Updated 5 years ago
• yangyangwithgnu / bypass_disablefunc_via_LD_PRELOAD

  View on GitHub
  bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
  ☆1,169Aug 7, 2021Updated 4 years ago
• threedr3am / tomcat-cluster-session-sync-exp

  View on GitHub
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆212May 19, 2020Updated 5 years ago
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆579Jan 28, 2020Updated 6 years ago
• iceyhexman / flask_memory_shell

  View on GitHub
  Flask 内存马
  ☆313Mar 26, 2021Updated 4 years ago
• lijiejie / idea_exploit

  View on GitHub
  Gather sensitive information from (.idea) folder for pentesters
  ☆370Aug 5, 2022Updated 3 years ago
• allyshka / Rogue-MySql-Server

  View on GitHub
  MySQL fake server for read files of connected clients
  ☆605Jul 23, 2017Updated 8 years ago