Ip2region is an offline IP address manager framework and locator with both IPv4 and IPv6 supported, supporting billions of data segments, ten microsecond searching performance, xdb search client fo…

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Cknife

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

Burp suite 分块传输辅助插件

Nuclei plugin for BurpSuite

Java RMI Vulnerability Scanner

Vulnerability scanner based on vulners.com search API

WEB渗透测试数据库

SpringScan 漏洞检测 Burp插件

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

First IDE for Nmap Script (NSE) Development.

sqlmap embed in burpsuite

在网传的哥斯拉&冰蝎源码基础上加了一点注释

Eternalblue Doublepulsar exploit

HMCL 被一家国内公司买走了，所以在这里 Fork 一份被买之前的代码

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.