hkzck,胖子,github

公司团队日常工作积累，用于平时员工培训及工作参考资料。一、linux 1.java1.8的安装与卸载 2.tomcat8服务的安装与配置 3.mysql5.6服务的安装 4.nginx1.8.0服务的安装 5.redis与redis集群服务的安装 6.kafka服务的安装 7.keepalived服务的安装 8.Linux常用命令 9.zabbix监控系统安装步骤 10.Elasticsearch集群服务的安装 11.Keepalived+Nginx+Tomcat实现高可用Web服务(主备模式) 12.nginx及其依赖包升级步骤 13.nginx配置拦截URL特殊字符 14.使用docker部署springboot项目 15.docker安装nginx实现负载均衡.md 二、windows 1.java1.8环境的安装 2.tomcat8服务的安装与配置 3.mysql5.6服务的安装 4.redis与redis集群服务的安装 5.DBDocumentGenerator导出数据库字典的安装与使用 6.Maven的安装与配置三、开发规范 1.开发注释规范 2.代码规范 3.MySql开发规范四、避雷区 1.经验总结 2.文件检查附件:学习资料 1.Java编程**第四版完整中文高清版.pdf 2.Java企业级开发项目实践.pdf 3.Spring Boot参考指南.pdf 4.Spring实战第四版.pdf 5.锋利的jQuery第2版清晰版.pdf 6.跟我学Shiro-v1.1.pdf 7.设计模式之禅（第2版）.pdf 8.Mindmanager2016

aspx-webshell-antivirus-bypass

azure-sentinel-notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

book-management-system

图书管理系统

burp-exporter

Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.

chaos

:fire: CHAOS is a PoC that allow generate payloads and control remote operating systems.

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

computergraphics

计算机图形学-学习笔记

crawlergo

A powerful dynamic crawler for web vulnerability scanners

cti-fundamentals

A collection of papers, blogs, and resources that make up the quintessential aspects of cyber threat intelligence

cve-2021-36260

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

cve-2022-0543

CVE-2022-0543_RCE,Redis Lua沙盒绕过命令执行

cve-2022-0847

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”