longofo Goto Github PK

java-sec-code

Java Web Common Vulnerabilities and Security Code.

java-web-security

Java-Web-Security - Sichere Webanwendungen mit Java entwickeln

javaid

java source code static code analysis and danger function identify prog

javaunserializeexploits

javaweb-sec

攻击Java Web应用-[Java Web安全]

jmet

Java Message Exploitation Tool

jre8u20_rce_gadget

JRE8u20_RCE_Gadget

jsonbee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

learn-javaagent

learn-javaagent

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

longofo.github.io

my personal bolg

marshalsec

mt_rand-reverse

Script to recover mt_rand()'s seed with only two outputs and without any bruteforce.

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

nocode

The best way to write secure and reliable applications. Write nothing; deploy nowhere.

paddingoracleattack-shiro-721

Shiro-721 Padding Oracle Attack

paper

Web Security Technology & Vulnerability Analysis Whitepapers

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phpggc

PHP unserialize() payloads（php反序列化利用链）

poc-exp

漏洞研究，中间件/OA/CMS/路由器/...

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

python-javatools

Tools for examining Java bytecode in Python

rmi-jndi-ldap-jrmp-jmx-jms

rmi、jndi、ldap、jrmp、jmx、jms一些demo测试

routersploit-extend

routersploit的扩展，一个exploit设置多个目标并同时检测多个目标，结合网络空间搜索引擎搜索目标，统计检测结果并保存

scrapy-maoyan

scrapy爬取猫眼电影排行

scrapy-redis-zhihu

基于scrapy-redis的分布式爬虫

scrapy-toutiao-jiepai

scrapy爬取头条街拍图片

sec-chart

安全思维导图集合

security-code-scan

Vulnerability Patterns Detector for C# and VB.NET

security-ppt

Security-related Slide Presentation（大安全各领域各公司各会议分享的PPT）