gaogaostone Goto Github PK

rips

RIPS - A static source code analyser for vulnerabilities in PHP scripts

rips-scanner

RIPS - A static source code analyser for vulnerabilities in PHP scripts

rmideserialize

RMI 反序列化环境 一步步

rsa-and-lll-attacks

attacking RSA via lattice reductions (LLL)

rsa-attack

RSA加密应用常见缺陷的原理与实践

rsa-in-ctf

secguide

面向开发人员梳理的代码安全指南

secscan-authcheck

越权检测工具

sensitivefilescan

serializationdumper

A tool to dump Java serialization streams in a more human readable form.

shiro

Apache Shiro

sonar-auth-github

GitHub Authentication for SonarQube

sonar-auth-gitlab-plugin

Use GitLab OAuth login in SonarQube login page

spring-gateway-demo

Sample Spring application to Demonstrate the Gateway Actuator

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

subdomainsbrute

A fast sub domain brute tool for pentesters

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

tai-e

An easy-to-learn/use static analysis framework for Java

testinfra

Testinfra test your infrastructures

testinfra-by-example

veil

Veil 3.1.X (Check version info in Veil at runtime)

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulnapp

use docker to attack web as a demo

weakfilescan

动态多线程敏感信息泄露检测工具

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

wpscan

WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xss-demo

在线做题，issues 有答案

ysomap

A helpful Java Deserialization exploit framework.