youyou-pm10 Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

2022-hw-poc

2022 护网行动 POC 整理

antsword

**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

antsword-loader

AntSword 加载器

awesome-web-security

🐶 A curated list of Web Security materials and resources.

bithday-of-math-test

blockchainspider

A toolkit for blockchain data collection

blue-and-red-war

A chess about the army,stratagem and terrain

campus2024

2024届互联网校招信息汇总

codeql

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

codeqlanalysejar

CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库

codeqlpy

CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。

ctf-tools

CTF 工具集合

ctf-wiki

Come and join us, we need you!

cve-2023-38831

一款用于生成winrar程序RCE（即cve-2023-38831）的POC的工具。

demo-html-css

超好看的前端模板(学习用)

deserial_sink_with_jdbc

Some ReadObject Sink With JDBC

designpatterns-php

php设计模式

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

extractor-java

CodeQL extractor for java, which don't need to compile java source

fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

finger

一款红队在大量的资产中存活探测与重点攻击系统指纹探测工具

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gof23-study

study the design pattern called GoF23

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

hex-obfuscated-code

solve hex obfuscated code

hw

护网漏洞汇总

javadeserializelabs

javaDeserializeLabs

javasec

a rep for documenting my study, may be from 0 to 0.1

javasec-maskhe

自己学习java安全的一些总结，主要是安全审计相关