angelwhu Goto Github PK

_s

Hi. I'm a starter theme called _s, or underscores, if you like. I'm a theme meant for hacking so don't use me as a Parent Theme. Instead try turning me into the next, most awesome, WordPress theme out there. That's what I'm here for.

rhizobia_j

JAVA安全SDK及编码规范

rhizobia_p

PHP安全SDK及编码规范

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

serialkiller

Look-Ahead Java Deserialization Library

serialkillerbypassgadgetcollection

Collection of bypass gadgets to extend and wrap ysoserial payloads

shadowsocks

spring-jndi

Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

strapdown

Instant and elegant Markdown documents in the browser

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

struts2-scan

Struts2全漏洞扫描利用工具

subdomainsbrute

A simple and fast sub domain brute tool for pentesters

tools

一些实用的python脚本

vulnapp

use docker to attack web as a demo

w5

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

w5_web

W5 SOAR 开源前端

wdscanner

WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。

webcgi-exploits

Multi-language web CGI interfaces exploits.

weblogicscan

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

webogram

Telegram web application, GPL v3

webshell

This is a webshell open source project

wxappunpacker

Wechat App(微信小程序,.wxapkg)解包及相关文件(.wxss,.json,.wxs,.wxml)还原工具

xss

xstream_unserialization

XStream Unserialization Test

xstreampoc

POC for XStream RCE

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

ysoserial-test

ysoserial tool,some analyse and test