- 👋 Hi, I’m @pangzishouzi
- 👀 I’m interested in ...
- 🌱 I’m currently learning ...
- 💞️ I’m looking to collaborate on ...
- 📫 How to reach me ...
pangzishouzi Goto Github PK
Type: User
Bio: 弱小和无知不是生存的障碍,傲慢才是。。。
Type: User
Bio: 弱小和无知不是生存的障碍,傲慢才是。。。
2022 护网行动 POC 整理
个人域渗透学习笔记
awesome cloud security 收集一些国内外不错的云安全资源,该项目主要面向国内的安全人员
CobaltStrike的相关资源汇总 / List of Awesome CobaltStrike Resources
免杀技术大杂烩---乱拳也打不死老师傅
记录学习codeql的过程
🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
个人部分知识总结
可能是让你受益匪浅的英语进阶指南
Fastjson姿势技巧集合
tools
FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本),主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用
基于frp(0.44.0)二次开发,删除不必要功能,加密配置文件,修改流量以及文件特征
基于frp-0.58.1魔改二开,随机化socks5账户密码及端口、钉钉上线下线通知、配置文件oss加密读取、域前置防止溯源、源码替换/编译混淆等
一些常见字典
获取域控权限方法枚举
整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术,并搜集汇总了一些资料和工具。
研究利用golang各种姿势bypassAV
Java漏洞学习笔记 Deserialization Vulnerability
a rep for documenting my study, may be from 0 to 0.1
打造最强的Java安全研究与安全开发面试题库,帮助师傅们找到满意的工作
记录一下 Java 安全学习历程
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具
JDNI在java高版本的利用工具
对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改
K8S安全攻防思维导图 | Docker安全攻防思维导图
攻击向导
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
Config files for my GitHub profile.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.