zhangymjlu Goto Github PK

exploits

Miscellaneous exploit code

fbctf

Platform to host Capture the Flag competitions

fuzzbunch

NSA finest tool

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

gitlab-auditor

Auditing users' push/fetch events on GitLab

goagent

gocrack

gocrack-ui

hw

护网漏洞汇总

ibm_bak

IBM Developer 中文网站文章备份

iterm2-color-schemes

Over 200 terminal color schemes/themes for iTerm/iTerm2. Includes ports to Terminal, Konsole, PuTTY, Xresources, XRDB, Remina, Termite, XFCE, Tilda, FreeBSD VT, Terminator, Kitty, MobaXterm, LXTerminal, Microsoft's Windows Terminal

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

javapayload

JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).

javascript-malware-collection

Collection of almost 40.000 javascript malware samples

javaunserializeexploits

jmet

Java Message Exploitation Tool

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

kong

:monkey: The Microservice API Gateway

kpti-poc-collection

Meltdown/Spectre PoC src collection.

lcyscan

lianwifi

wifi万能钥匙api

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

linuxsecnotes

some learning notes about Linux Security

marshalsec

mirai-source-code

Leaked Mirai Source Code for Research/IoC Development Purposes

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率，用Go语言完全重构了原Python版本。

opsweb

百合网运维综合管理平台（python+flask框架+cmdb+scheduler+salt)，已经成功运行2年有余，基本能够实现日常运维80%以上的重复工作。因本系统依赖底层数据和众多第三方模块，部署运行难度比较大，建议仅用于研究代码！

orange

OpenResty/Nginx Gateway for API Monitoring and Management.