Name: thelostworld
Type: User
Bio: thelostworld公众号
网络安全： 漏洞分析复现、Java开发学习记录、python代码学习记录
免责声明：主页提供安全工具、程序(方法)可能带有攻击性，仅供安全研究与教学之用，风险自负!
转载声明：著作权归作者所有。商业转载请联系作者获得授权，非商业转载请注明出处。订阅查看更多复现文章、学习笔记
thelostworld
安全路上，与你并肩前行！！！！
个人知乎：
https://www.zhihu.com/people/fu-wei-43-69/columns
个人简书：
https://www.jianshu.com/u/bf0e38a8d400
个人CSDN：
https://blog.csdn.net/qq_37602797/category_10169006.html
个人博客园：
https://www.cnblogs.com/thelostworld/
FREEBUF主页：
https://www.freebuf.com/author/thelostworld?type=article
雀语博客主页：
https://www.yuque.com/thelostworld
-
-frp-
基于原版 frp 二开, 添加了一些小功能
2019_vul_warning_poc_collect
整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善
2022-hw-poc
2022 护网行动 POC 整理
2023_hvv
2023hvv
2023 HVV情报速递~new
2023hw-poc
2023HW-POC
7kbscan-rdp-sniper
一款有图形界面的RDP(3389)口令检测工具
aazhen-v3.1
自研JavaFX图形化漏洞扫描工具，支持ThinkPHP 2.x RCE，Thinkphp5 5.0.22/5.1.29RCE，ThinkPHP5 5.0.23RCE和ThinkPHP5 SQL注入漏洞和敏感信息泄露漏洞的漏洞检测，以及命令执行的功能。漏洞POC基本适用ThinkPHP全版本漏洞。
alb
攻击日志分析工具
alfresco-repository
Metadata and content storage for Alfresco Content Services (Community and Enterprise)
allscanner
数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
android_carcampus
apache-dubbo-cve-2023-23638-exp
Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
apache-tomcat-mongodb-remote-code-execution
Apache Tomcat + MongoDB Remote Code Execution
apache_solr_rce_via_velocity_template
Apache_Solr_RCE_via_Velocity_template
api-t00l
互联网厂商API利用工具。
apifox
Apifox = Postman + Swagger + Mock + 代码生成。
archery
SQL 审核查询平台
arl
ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
arl_files
arl_files备份项目
artillery
JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。
asscan
Automated Subnet Scanner
asset-scan
asset-scan是一款适用甲方企业的外网资产周期性扫描监控系统
assetscan
资产探测工具，检测存活，检测风险端口，常规端口，全端口探测等等，对探测的端口的脆弱面进行安全分析进行
attacksurfacemapper
AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.
attacktomcat
Tomcat漏洞利用工具
auto-earn
一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具
awesome_shiro
CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行，反弹shell的脚本
awsome-redis-rogue-server
Redis-Rogue-Server Implement
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
