75acol Goto Github PK

attack-surface-detector-burp

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

awesome-vulnerabilitymining-security

chatgpt-demo

A demo repo based on OpenAI API (gpt-3.5-turbo)

code-inspector

JavaWeb漏洞审计工具，构建方法调用链并模拟栈帧进行分析（由于作者精力有限，可能不会再更新这个项目）

codyze

Codyze is a static analyzer for Java, C, C++ based on code property graphs

cve-2022-22963

cve-2022-22963-poc

geowebcache

GeoWebCache is a tile caching server implemented in Java that provides various tile caching services like WMS-C, TMS, WMTS, Google Maps, MS Bing and more

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

i-s00n

i-s00n-dump-research

Dump of I-S00N

idea-toolwindow

idea 开发插件 侧边栏demo

javarce

实战场景较通用的 Java Rce 相关漏洞的利用方式 | Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

learningsecurity

memory-horse

内存马学习

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

mybatis-3

MyBatis SQL mapper framework for Java

openpdf

OpenPDF is a free Java library for creating and editing PDF files with a LGPL and MPL open source license. OpenPDF is based on a fork of iText. We welcome contributions from other developers. Please feel free to submit pull-requests and bugreports to this GitHub repository. ⛺

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

plugin-restful-toolkit

一个Restful IDEA 插件，扫Spring Web 和Feign 生成 可视化的 API Tree ，方便调用。

procyon

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

redis-rce

Redis RCE 的几种方法

secgpt

secgpt网络安全大模型

selection-tasks-plugin

Jenkins selection-tasks-plugin plugin

soot-demo

static-analysis

静态分析基础教程

static-program-analysis-book

Getting started with static program analysis. 静态程序分析入门教程。

study

学习

tai-e

An easy-to-learn/use static analysis framework for Java