zh3feng Goto Github PK

ndpi

Open Source Deep Packet Inspection Software Toolkit

node-lessons

:closed_book:《Node.js 包教不包会》 by alsotang

note

notsoserial

Java Agent which mitigates deserialisation attacks by making certain classes unserializable

ntopng

Web-based Traffic and Security Network Traffic Monitoring

php-webshell-checker

https://github.com/nbs-system/php-malware-finder

pl-compiler-resource

程序语言与编译技术相关资料（持续更新中）

poc-t

渗透测试插件化并发框架

pocs-cve_2012_4681

A Simple PoC for CVE-2012-4681

pocs-fastjson1241

pocs-jackson_2017_17485

A simplified PoC modified from https://github.com/irsl/jackson-rce-via-spel

pocs-jre8u20_rce_gadget

pocs-weblogic_2017_10271

Simplified PoC for Weblogic-CVE-2017-10271

react-pxq

一个 react + redux 的完整项目 和 个人总结

rhinodemo

sanitize-html

Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance

scanners-box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

secguide

面向开发人员梳理的代码安全指南

secwiki

serializationdumper

A tool to dump Java serialization streams in a more human readable form.

subjack

Hostile Subdomain Takeover tool written in Go

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

vulhub

Docker-Compose file for vulnerability environment

weblogic_cmd

weblogic t3 deserialization rce

weblogic_ssrf

A pyhon script to do port scan via weblogic uuid

xdctf2015

writeup about XDCTF 2015

xxeinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.