taomamba Goto Github PK

autoexecute

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦

cve-2019-3396_exp

CVE-2019-3396 confluence SSTI RCE

dirsearch

Web path scanner

docker-verynginx

A very powerful and friendly nginx based on lua-nginx-module( openresty ) which provide WAF, Control Panel, and Dashboards.

dshield

dubbo

:loudspeaker: Dubbo is a distributed, high performance RPC framework empowering applications with service import/export capabilities.

easytransaction

依赖于Spring的一个柔性事务实现，包含 TCC事务，补偿事务，基于消息的最终一致性事务，基于消息的最大努力交付事务交付

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fastjson-rce-exploit

exploit for fastjson remote code execution vulnerability

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

fastjsonscan

fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。

fuzzing-dicts

Web Security Dictionary

gitbook

肾透测试中心 - https://gitbook.se7ensec.cn/

gpmall

【咕泡学院实战项目】-基于SpringBoot+Dubbo构建的电商平台-微服务架构、商城、电商、微服务、高并发、kafka

hack_node

hellraiser

Vulnerability Scanner

hfish

Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统，记录黑客攻击手段

how-does-xmanager-encrypt-password

This is a repo to tell you how Xmanager (XFtp, XShell) encrypt password. Transferred from https://github.com/DoubleLabyrinth/how-does-Xmanager-encrypt-password

ibm_appscan_batch_scan_script

IBM AppScan批量扫描脚本

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

java-

java-interview

Java 面试必会 直通BAT

javatutorial

Java教程，包括多线程，泛型，反射，IO，容器类,注解

json-js

JSON in JavaScript

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

leetcode

LeetCode Solutions: A Record of My Problem Solving Journey.( leetcode题解，记录自己的leetcode解题之路。)

linux

linux安全检查