nth347 Goto Github PK

amass

In-depth attack surface mapping and asset discovery

androidmobilepentest101

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

antsword-loader

AntSword 加载器

auth-analyzer

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

chunk-proxy

ctf-wutfaces-resources

MatesCTF2018 WutFaces - A CTF challenge made by @tint0 with my own solution

ctf_challenges

cve-2013-2251

Vulnerable environment of CVE-2013-2251 (S2-016) for testing

cve-2018-12636_exploit

Exploit for CVE-2018-12636

cve-2018-20148_exploit

Exploit for CVE-2018-20148 - WordPress PHAR deserialization via XMLRPC

cve-2018-3810_exploit

Exploit for CVE-2018-3810

cve-2019-9081_poc

PoC for CVE-2019-9081

cve-2020-17530

Vulnerable environment of CVE-2020-17530 (S2-061) for testing

cve-2020-28032_poc

PoC for CVE-2020-28032 (It's just a POP chain in WordPress < 5.5.2 for exploiting PHP Object Injection)

cve-2021-3129_exploit

Exploit for CVE-2021-3129

cve-2021-31805

Vulnerable environment of CVE-2021-31805 (S2-062) for testing

dvb

DVB - Just another Damp Vulnerable Blog

image-based_stegano

The simple implementation of image-based steganography using LSB method

java-rmi-deserialization

Java RMI deserialization vulnerability demos

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

java-ssti-demo

Java SSTI vulnerability demos based on Spring Boot and various template engines (Thymeleaf, FreeMarker, Velocity)

javaid

java source code static code analysis and danger function identify prog

javasecinterview

打造最强的Java安全研究与安全开发面试题库，包含问题和详细的答案，帮助师傅们找到满意的工作

javassist-demo

Simple demo demonstrates how to modify Java code at runtime using Javassist library

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

jndi-injection-servers

Some RMI/LDAP servers for exploiting JNDI injections

khepri

Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++ like CobaltStrike.

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linux-pam-backdoor