☆180Jan 29, 2026Updated 5 months ago
Alternatives and similar repositories for xianzhi-research
Users that are interested in xianzhi-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- wooyun-legacy skill for claude code☆1,742Updated this week
- 东方隐侠团队出品，代码审计skill☆136Feb 25, 2026Updated 4 months ago
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆969Jun 16, 2026Updated last month
- redc use template | redc 使用模版库☆45Jun 4, 2026Updated last month
- Claude Code plugin for Java JAR security audit — 基于 jar-analyzer 的 Claude Code 安全审计插件，构建数据库，AI 深入分析☆139Mar 20, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Java Vulnerability Exploitation Platform☆2,125Apr 29, 2026Updated 2 months ago
- Java bytecode analysis engine built on ASM, extracts method call graphs, inheritance trees, Spring routes, and string constants from JAR/…☆49Mar 20, 2026Updated 3 months ago
- 目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查☆266Aug 16, 2025Updated 11 months ago
- A AI general-purpose state-space search engine, validated first on autonomous penetration testing.☆2,029Updated this week
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆1,531Jun 26, 2026Updated 3 weeks ago
- AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat mode…☆327May 12, 2026Updated 2 months ago
- 让fscan再次伟大☆357Jun 18, 2026Updated last month
- 🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sink…☆788Mar 14, 2026Updated 4 months ago
- 腾讯云智能渗透黑客松 Official repository of Tencent Cloud Intelligent Penetration Hackathon. Showcasing top open-source projects of LLM-based auton…☆707Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。☆358Apr 3, 2026Updated 3 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆375Mar 25, 2026Updated 3 months ago
- A Java Route Collection Tool☆103Aug 1, 2024Updated last year
- 腾讯ai渗透黑客松参赛作品（xjtuHunter）☆367Dec 4, 2025Updated 7 months ago
- LuaN1aoAgent is a cognitive-driven, fully autonomous AI penetration testing agent powered by dual-graph reasoning. It is developed by the…☆1,110Updated this week
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆590Feb 7, 2026Updated 5 months ago
- DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。☆6,663Jul 7, 2026Updated last week
- zoomeye钟馗之眼子域名查询api脚本☆11Apr 18, 2023Updated 3 years ago
- GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆256Apr 29, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,551Updated this week
- 红队浏览器插件-检测VUE站点未授权漏洞☆900May 7, 2026Updated 2 months ago
- 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。☆998Updated this week
- GitHub Advisory Database Skills builder☆74Mar 14, 2026Updated 4 months ago
- 各类域名数据处理☆13Jul 24, 2024Updated last year
- CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。☆853Jul 6, 2023Updated 3 years ago
- Leveraging LLM to generate Java deserialization chains☆87Mar 12, 2026Updated 4 months ago
- Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析…☆2,133Updated this week
- Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率☆819Feb 26, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- antix's baby intent runtime and meta-tooling design.☆173Dec 29, 2025Updated 6 months ago
- Xtools 是一款 Sublime Text 插件，同时是一款简单的资产处理｜命令行调用工具。☆248Nov 25, 2025Updated 7 months ago
- 最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.☆1,052Updated this week
- 用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。☆42Sep 17, 2025Updated 10 months ago
- Next-generation IaC tools | 下一代基础设施管理工具☆182Jun 4, 2026Updated last month
- 面向移动安全分析场景的 6 阶段总控 Skill。用于统一调度 APK 静态侦察、流量与代码对齐、SO/JNI 深度分析、加密与漏洞综合分析、验证设计与报告交付流程。支持 JADX MCP、Burp/Yakit MCP、IDA/Ghidra MCP。☆122Jun 30, 2026Updated 2 weeks ago
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆512Jan 12, 2026Updated 6 months ago