cleanmgr112 Goto Github PK

code_audit

java/php代码审计

codeql_compile

自动反编译闭源应用，创建codeql数据库

codeqllearn

记录学习codeql的过程

codeqlpy

CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。

codeqlrule

个人使用CodeQL编写的一些规则

codereview

代码审计总结

coeus

Android apk/sdk Scan包括android apk/sdk 安全审计代码扫描以及国内政策扫描

com.xiaomi-miio

Homey app to control Mi Home devices that implement the miIO protocol and Xiaomi gateway child devices

connectedhomeip

Matter (formerly Project CHIP) is creating more connections between more objects, simplifying development for manufacturers and increasing compatibility for consumers, guided by the Connectivity Standards Alliance (formerly Zigbee Alliance).

corscanner

Fast CORS misconfiguration vulnerabilities scanner🍻

crawler-master-v3

first commit

crawler_public_number

微信公众号爬取(中间人代理法)

crawlergo

A powerful browser crawler for web vulnerability scanners

cross_domain_postmessage_vuln_dig

WEB 跨域postMessage() 漏洞挖掘工具,基本原理:使用AJAX 获取页面代码,结合iframe 和data 协议构造测试环境,然后在iframe 下的window.onmessage 中插入hook 监控onmessage 的参数,最后通过能否被原来的onmessage 逻辑引用参数中的data 属性来判断是否可以跨域传递数据..

cryptographic-voting-system

基于同态加密技术的匿名电子投票系统

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist

cve-2019-17571

Apache Log4j 1.2.X存在反序列化远程代码执行漏洞

cve-2020

2020一些漏洞

cve-2020-13935

Exploit for WebSocket Vulnerability in Apache Tomcat

cve-2020-5398

💣 CVE-2020-5398 - RFD(Reflected File Download) Attack for Spring MVC

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-45232-exp

cve-2022-0543

CVE-2022-0543_RCE,Redis Lua沙盒绕过 命令执行

cve-2022-21449-tls-poc

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

cve-2022-42889-poc

Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889.

cve-2022-42889-text4shell-docker

Dockerized POC for CVE-2022-42889 Text4Shell

cve-2022-44268-imagemagick-arbitrary-file-read-poc

CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator

cve-2023-21839

Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)

cve-2023-25194

cve-2023-25690-poc

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.