maskhe Goto Github PK

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

axinsast

blasting_dictionary

爆破字典

bugbountynotes

简单记录下自己在挖掘SRC

bugnotes

Bypasses and check for vulns

codespace_demo

composer-demo

cve-2019-5736-poc

getshell test

cve-2020-15148-bypasses

几条关于CVE-2020-15148（yii2反序列化）的绕过

cve-2020-2555

CVE-2020-2555

cve-2021-21300

django-filter-tables2-admin

A demo of customized admin developed with django-filter and django-tables2

docker-tutorial

🐳Docker入门学习笔记

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

dongtai-agent-java

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

dongtai-core

Provides the Django Model class that the DongTai project depends on, the Django API abstract class of the DongTai project, the vulnerability detection engine, constants, documents, etc.

dongtai-engine

DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, data packet replay processing, etc.

evil_ftp

fastjsonscan

一个简单的Fastjson反序列化检测burp插件

genealogy

利用二叉树实现一个简单的家谱管理系统

immomobile

java-demo

java特性小demo,以便后续参考

javasec

自己学习java安全的一些总结，主要是安全审计相关

maskhe

test

mosec-composer-plugin

用于检测composer项目的第三方依赖组件是否存在安全漏洞。

mosec-maven-plugin

用于检测maven项目的第三方依赖组件是否存在安全漏洞。

mosec-node-plugin

用于检测 node 项目的第三方依赖组件是否存在安全漏洞。

myblog

just for fun

obsidian-plugin-demo

obsidian plugin learning demo

pentest_study

从零开始内网渗透学习