wangsz05 Goto Github PK

-as-exploits

**蚁剑后渗透框架

awesome-hacking

awesome hacking chinese version

awesome-java-security

Java安全☞代码审计/漏洞分析/武器化

bistoury

Bistoury是去哪儿网的java应用生产问题诊断工具，提供了一站式的问题诊断方案

blog

This is my blog

bypasswaf

用于mssql手注生成混淆payload

crashanalysis

cubic

一站式问题定位平台，还在为线上问题而烦恼吗？分布式实例监控、线程栈监控、线程池监控、动态arthas命令集、依赖分析等等等，助你快速定位问题

cve-2021-3156

Sudo Baron Samedit Exploit

depix

Recovers passwords from pixelized screenshots

develop_note

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

embedded-jetty-websocket-examples

Embedded Jetty WebSocket Examples

faraday

Collaborative Penetration Test and Vulnerability Management Platform

fastjson

Fastjson姿势技巧集合

fastjson-blacklist

fastjson_payload

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gadgetinspector

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

godzilla

哥斯拉

graffiti

A tool to generate obfuscated one liners to aid in penetration testing

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hacker-roadmap

:pushpin: A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security.

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

hw-2021

护网漏洞汇总

hw-2022

2022 护网行动 POC 整理

incubator-skywalking

A distributed tracing system, and APM ( Application Performance Monitoring )

instrument

jar-analyzer

Jar Analyzer - 一个JAR包分析工具，批量分析搜索，方法调用关系搜索，字符串搜索，Spring分析，CFG分析，JVM Stack Frame分析，远程分析Tomcat，进阶表达式搜索，自定义SQL查询，字节码查看，命令行分析，使用简易RASP保护

java-rce-echo

Java RCE 回显测试代码