jweny Goto Github PK

awesome-security-books

一个搬运工项目，分享一点点之前看过的文档/结构图/思维导图/ppt/电子书

capsule8

Capsule8: open-source cloud-native behavioral security monitoring

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

check_jsonp_based_on_ast

基于AST的JSONP劫持漏洞自动化挖掘

cnseay

Seay源代码审计系统

cobaltstrike

CobaltStrike's source code

crawlergo

A powerful browser crawler for web vulnerability scanners

cve-2022-22980

CVE-2022-22980 exp && 靶场

cve-2022-23131

cve-2022-23131 exp

cve-2024-32002_exp

cve-2024-32002_hook

distributed_docker_openvas

基于Docker集群的分布式Openvas(GVM)。本项目包括：GVM-Docker镜像，Openvas-Scanner-Docker镜像，GVM远程调度(golang)。

dongtai-agent-java

“火线～洞态IAST”是一款专为甲方安全人员、代码审计工程师和0 Day漏洞挖掘人员量身打造的辅助工具，可用于集成devops环境进行漏洞检测、作为代码审计的辅助工具和自动化挖掘0 Day。

gosqlmap

golang 实现 sqlmap

goysoserial

go-ysoserial

http-request-smuggling-checker

A tool to quickly check HTTP-Request-Smuggling, written by python3

jweny

jweny.github.io

一个小博客

log4j-vul-env

log4j tomcat web漏洞环境

memshelldemo

内存马Demo合集 memshell demo for java / php / python

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

petitpotato

Local privilege escalation via PetitPotam

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

pocassist

傻瓜式漏洞PoC测试框架

pocassistdb

database of pocassist（漏洞库）

pocassistweb

web ui of pocassist

reader

Convert any URL to an LLM-friendly input with a simple prefix https://r.jina.ai/

reapoc

OpenSource Poc && Vulnerable-Target Storage Box.

screenshot-to-code

Drop in a screenshot and convert it to clean code (HTML/Tailwind/React/Vue)

shiro-cve-2020-17523

shiro-cve-2020-17523 漏洞的两种绕过姿势分析 以及配套的漏洞环境