Fushuling/TaintScaner
一款基于污点分析的PHP扫描工具,能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径,同时支持单独对函数的扫描。
2025年大学毕业后失业至今 | Unemployed since graduating from university in 2025.
一款基于污点分析的PHP扫描工具,能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径,同时支持单独对函数的扫描。
Official mirror of the MonetDB JDBC driver
Fastjson + MySQL 条件下不出网利用测试环境
Config files for my GitHub profile.
Indico - A feature-rich event management system, made @ CERN, the place where the Web was born.
[Mirror] Self-hosted abuse detection and rule enforcement against low-effort mass AI scraping and bots.
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
Apache Dubbo漏洞测试Demo及其POC
SUCTF 2026 归档
springboot2.0开发的个人网站,集成了:个人首页,个人博客,个人作品
《深入JDBC安全:特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Exploitation Techniques Revealed" - Research Summary Project
正规子群.AI Agent | SubgroupX: A high-performance AI Agent for offensive security, CTF operations, and active defense protocols. Architected by Normal Subgroup. 邀请测试阶段中
🥷 AI-Powered Penetration Testing Platform with Stealth Mode - Auto CTF Solver, Real-World Testing, HTTP Traffic Obfuscation
Search for Directory Traversal Vulnerabilities
Automatic SSRF fuzzer and exploitation tool
File upload vulnerability scanner and exploitation tool.
Crawler LeetCode,爬虫挑战合集
Official Writeup of SUCTF 2025