- Heaven
-
19:41
(UTC +08:00) - @kmahyyg@infosec.exchange
Highlights
Lists (11)
Sort Name ascending (A-Z)
Starred repositories
Ghidra is a software reverse engineering (SRE) framework
A distributed task scheduling framework.(分布式任务调度平台XXL-JOB)
Git Server with CI/CD, Kanban, and Packages. Seamless integration. Unparalleled experience.
Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.
Official repository of Trino, the distributed SQL query engine for big data, formerly known as PrestoSQL (https://trino.io)
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
An experimental toolset for Unity asset and asset bundle files.
Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
Unblock 163 Cloud Music Android client through Xposed.
domain_hunter的高级版本,SRC挖洞、HW打点之必备!自动化资产收集;快速Title获取;外部工具联动;等等
A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
Fastjson vulnerability quickly exploits the framework(fastjson漏洞快速利用框架)
Stop uploading my installed app list! Miui!
A malicious LDAP server for JNDI injection attacks
Multifunctional java deobfuscation tool suite
搜集了市面上绝大部分weblogic解密方式,整理了7种解密weblogic的方法及响应工具。
arthas idea plugin 更简单的使用arthas的IDEA 插件,方便的构建各种arthas 命令,复制到剪切板 然后到服务器上启动arthas 执行命令。
(周瑜)Java - SpringBoot 持久化 WebShell(不仅仅是SpringBoot,适合任何符合JavaEE规范的服务)
[DEPRECATED] The most up-to-date open source Spotify client
一款用于JNDI注入利用的工具,大量参考/引用了Rogue JNDI项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。