garymao Goto Github PK

analyze

NaiveSystems Analyze is a static analysis tool for code security and compliance.

antsword

**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

as-exploits

**蚁剑后渗透框架

auto-gpt

An experimental open-source attempt to make GPT-4 fully autonomous.

binabsinspector

BinAbsInspector: Vulnerability Scanner for Binaries

bochspwn

A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities

codeinspector

基于Java ASM技术和GadgetInspector的原理，尝试实现一个自动Java代码审计工具。目前做到了可控参数分析和数据流跟踪分析

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

elkeid

Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

gadgetinspector-1

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

hyperdbg

State-of-the-art native debugging tool

jar-analyzer

A Java GUI Tool for Analyzing Jar

java-sec-code

漏洞测试集：Java web common vulnerabilities and security code which is base on springboot and spring security

javaid

java source code static code analysis and danger function identify prog

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

marshalsec

micro_service_seclab

Java漏洞靶场

openchatkit

paper

Web Security Technology & Vulnerability Analysis Whitepapers

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

practical-cryptography-for-developers-book

Practical Cryptography for Developers: Hashes, MAC, Key Derivation, DHKE, Symmetric and Asymmetric Ciphers, Public Key Cryptosystems, RSA, Elliptic Curves, ECC, secp256k1, ECDH, ECIES, Digital Signatures, ECDSA, EdDSA

privategpt

Interact with your documents using the power of GPT, 100% privately, no data leaks

safety-project-collection

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

springinspector

针对于Spring框架的自动Java代码审计工具

tai-e

An easy-to-learn/use static analysis framework for Java

tai-e-assignments

Tai-e assignments for static program analysis

taint

Taint is a PHP extension, used for detecting XSS codes

tika

The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).