yyhylh Goto Github PK

apache-dubbo-cve-2023-23638-exp

Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践

blasting_dictionary

爆破字典

codeql-queries

My CodeQL queries collection

cve-2020-2883

Weblogic coherence.jar RCE

dubbo-scan

一款让你不只在dubbo-sample、vulhub或者其他测试环境里检测和利用成功的Apache Dubbo 漏洞检测工具。

gitblit

pure java git solution

gitlab-cve-2021-22205

go-common

哔哩哔哩 bilibili 网站后台工程 源码

godzillamemoryshellproject

hope-boot

🌱 Hope-Boot 一款现代化的脚手架项目

httplib2

Small, fast HTTP client library for Python. Features persistent connections, cache, and Google App Engine support. Originally written by Joe Gregorio, now supported by community.

jar-analyzer

Jar Analyzer Project

java-object-searcher

java内存对象搜索辅助工具

jyso

It can be either a JNDIExploit or a ysoserial.

log4j2-rce-scanner

BurpSuite Extension: Log4j RCE Scanner

marshalsec

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

poccheck

用于第一时间获取X-ray扫描器的poc更新情况

project-memoria-detector

raindrops

润物细无声

satellian-cve-2020-7980

PoC script that shows RCE vulnerability over Intellian Satellite controller

sj-kit

Help security researchers to quickly research and deserialization vulnerability assisted research.

stopwords

中文常用停用词表（哈工大停用词表、百度停用词表等）

upnp_service

一个简单的基于Cling的UPnP协议的服务

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

weblogic-framework

weblogic-framework

weblogicpoc

Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883 ，。。。

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

yyhylh.github.io