wangsz05 Goto Github PK

javasec

a rep for documenting my study, may be from 0 to 0.1

jersey-rest-server

RESTful WebService with Maven, Jersey and Jetty

jersey2-jetty-example

This is an example of a Rest embedded server in a java application using Jersey 2, Jetty, and Jackson. There is also a project to test the Rest interface.

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

jndiexploit

A malicious LDAP server for JNDI injection attacks

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

jsshell

JSshell - A JavaScript reverse shell for exploiting XSS remotely or finding blind XSS, working with both Unix and Windows OS

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

learndemo

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

let-us-play-box

linux

Linux kernel source tree

memshell

a webshell resides in the memory of java web server

micro8

Gitbook

mind-map

各种安全相关思维导图整理收集

mogu_blog_v2

蘑菇博客(MoguBlog)，一个基于微服务架构的前后端分离博客系统。Web端使用Vue + Element , 移动端使用uniapp和ColorUI。后端使用Spring cloud + Spring boot + mybatis-plus进行开发，使用 Jwt + Spring Security做登录验证和权限校验，使用ElasticSearch和Solr作为全文检索服务，使用Github Actions完成博客的持续集成，使用ELK收集博客日志，文件支持上传七牛云和Minio，支持Docker Compose脚本一键部署。

monitor

监控服务器（包括Linux和Windows）的资源：CPU\内存\磁盘IO\网络带宽\端口的连接数\进程级别的CPU使用率和内存占用，请配合前台展示monitorweb使用，效果更佳。

mytodolist

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

openrasp

🔥Open source RASP solution

openrasp-iast

IAST 灰盒扫描工具

oscp

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

php-backdoors

A collection of PHP backdoors. For educational or testing purposes only.

prepare-for-awd

AWD攻防赛脚本集合

sec-chart

安全思维导图集合

secinfo

收集的信息

secinfocollect

securitylist

A list for Web Security and Code Audit

shiroexploit

Shiro命令执行工具