999999999a Goto Github PK

fastjsonscan

Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency

fir

Fast Incident Response

frida-app-hooks

frida-intercept-encrypted-api

A tool to help you intercept encrypted APIs in iOS or Android apps

frida-labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

frida-script-collection

主要记录对各路frida脚本的整理,长期更新

frida_js

使用过frida hook的js代码（自用）

ghidra

Ghidra is a software reverse engineering (SRE) framework

github-slideshow

A robot powered training repository :robot:

golin

弱口令检测、 漏洞扫描、端口扫描（协议识别，组件识别）、web目录扫描、子域名扫描、等保模拟定级、自动化运维、等保工具（网络安全等级保护现场测评工具）内置3级等保核查命令、基线核查工具

hackermind

渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，数据安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

hae

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

hello-java-sec

☕️ Java Security，安全编码和代码审计

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javasec

a rep for documenting my study, may be from 0 to 0.1

jsrpc

远程调用(rpc)浏览器方法，免去抠代码补环境

jyso

It can be either a JNDIExploit or a ysoserial. JYso是一个可以用于 jndi 注入攻击和生成反序列化数据流的工具。

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linglong

一款甲方资产巡航扫描系统。系统定位是发现资产，进行端口爆破。帮助企业更快发现弱口令问题。主要功能包括: 资产探测、端口爆破、定时任务、管理后台识别、报表展示

magicude

分布式端口（漏洞）扫描、资产安全管理、实时威胁监控与通知、高效漏洞闭环、漏洞wiki、邮件报告通知、poc框架

mesatee

A Framework for Universal Secure Computing

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

moonbox

月光宝盒：无侵入的流量录制与回放平台 A server-side traffic capture and replay platform with noninvasive

movecert

movecert

mshell

Memshell-攻防内存马研究

nebula

"星云"业务风控系统，主工程

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。