active-directory-pentest-notes

个人域渗透学习笔记

arsenal

Cobalt Strike 3.13 Arsenal Kit

clash-verge-rev

Continuation of Clash Verge - A Clash Meta GUI based on Tauri (Windows, MacOS, Linux)

clash-verge-service

Clash Verge Service

cloud189checkin-actions

基于Github Actions的天翼云盘每日签到

cmwtat_digital_edition

CloudMoe Windows 10 Activation Toolkit get digital license, the best open source Win 10 activator in GitHub. GitHub 上最棒的开源 Win10 数字权利（数字许可证）激活工具！

codeqlnote

Codeql学习笔记

cve-2020-14645

Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()

cve-2020-14756

WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

cve-2020-2551

Weblogic IIOP CVE-2020-2551

cve-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

cve-2020-2883

Weblogic coherence.jar RCE

cve-2021-35215

SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

dd

萌咖大佬的Linux 一键DD脚本

design-pattern

:closed_book: design pattern 包教不包会

dnlib

Reads and writes .NET assemblies and modules

docs

The open-source repo for docs.github.com

dotnet-deserialization

dotnet 反序列化学习笔记

fastjson-bypass-autotype-1.2.68

fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.

fuck-gfw

记录各个包管理器使用代理的方法, 因为GFW已经浪费了已经数不清的时间, FUCK GFW

java-benchmarks

javaagent-tomcat-memshell

使用java agent反序列化注入内存shell

javaweb-sec

learn-regex

Learn regex the easy way

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

metacubexd

Mihomo Dashboard, The Official One, XD

mihomo

A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests