1nhann Goto Github PK

fileupload_lfi_demo

一些特殊环境的 LFI 的 demo 和 exp

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzingpaper

Recent Fuzzing Paper

geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

go-learning-with-hack

Go-Learning-With-Hacker--go语言HackTools开发教程从入门到入狱

gobypass

Golang免杀生成工具，参考网上已有的免杀方式实现的半自动免杀马生成工具，需要本地安装Golang环境，支持多种参数与方式生成

hack-fastjson-1.2.80

hack-requests

The hack-requests is an http network library for hackers

hackjava

《深入理解Java代码审计》

haffman-encoder-decoder

Data Structure Course Design by 1nhann

hexo-blog-encrypt

Yet, just another hexo plugin for security.

hfctf2022_ezchain_exp

howtocook

程序员在家做饭方法指南。Programmer's guide about how to cook at home (Chinese only).

hub

hub

humansystemoptimization

健康学习到150岁 - 人体系统调优不完全指南

java-rce-echo

Java RCE 回显测试代码

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

java_ser_format

Just mindmapping according to official document ( useful for further study )

jdk8u332_codeql_db

编译好的 jdk8u332 codeql 数据库

jellovm

JVM in Python that can only run "Hello, World"

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jodd

Jodd! Lightweight. Java. Zero dependencies. Use what you like.

jodd-http

Simple Java HTTP client.

kitty

Fuzzing framework written in python

laravel

Laravel is a web application framework with expressive, elegant syntax. We’ve already laid the foundation for your next big idea — freeing you to create without sweating the small things.

lawrefbook

中华人民共和国法律手册

ldapserver

用于直接bind序列化数据的 ldap server

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。