wadewfsssss Goto Github PK

1earn

个人维护的安全知识框架,内容偏向于web

awesome-cloud-security

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

blackhat-go

As hackers, we put a premium on function over elegance as time is always scarce. When you need to quickly create a solution to a problem, style concerns come secondary.

cat

CAT 作为服务端项目基础组件，提供了 Java, C/C++, Node.js, Python, Go 等多语言客户端，已经在美团点评的基础架构中间件框架（MVC框架，RPC框架，数据库框架，缓存框架等，消息队列，配置系统等）深度集成，为美团点评各业务线提供系统丰富的性能指标、健康状况、实时告警等。

classgraph

An uber-fast, ultra-lightweight, parallelized Java classpath scanner and module scanner.

cloud-native-security-book

《云原生安全：攻防实践与体系构建》资料仓库

codeql

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

codeqlnote

Codeql学习笔记

darkloadlibrary

LoadLibrary for offensive operations

dongtai-agent-java

“火线～洞态IAST”是一款专为甲方安全人员、代码审计工程师和0 Day漏洞挖掘人员量身打造的辅助工具，可用于集成devops环境进行漏洞检测、作为代码审计的辅助工具和自动化挖掘0 Day。

dubbo-exp

Dubbo反序列化一键快速攻击测试工具，支持dubbo协议和http协议，支持hessian反序列化和java原生反序列化。

ffuf

Fast web fuzzer written in Go

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

gopkg

example for the go pkg's function

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

labs

Vulnerability Labs for security analysis

learngo

1000+ Hand-Crafted Go Examples, Exercises, and Quizzes

learning-codeql

CodeQL Java 全网最全的中文学习资料

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

micro8

myysoserial

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

redis5.0-rce

Redis5.0 RCE

reverse-shell

Reverse Shell as a Service

revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities