一张全网的网站蜘蛛网，会自动从入口网址开始，爬取所有开放的网站，获取网站标题、微信、QQ、电话信息等

Static code auditing system

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Java bytecode engineering toolkit

IAST 灰盒扫描工具

Google V8 with OpenRASP builtins

Source Code Security Audit (源代码安全审计)

CAS 硬编码 远程代码执行漏洞

Java web common vulnerabilities and security code which is base on springboot and spring security

beego is an open-source, high-performance web framework for the Go programming language.

Bee is a tool for helping develop with beego app framework.

APM, (Application Performance Management) tool for large-scale distributed systems.

Spark Connector for Alibaba Log Service

Citrix ADC Remote Code Execution

Protocol Buffers - Google's data interchange format

shiro 反序列 命令执行辅助检测工具

一个免费的镜像漏洞扫描工具, 可以扫描镜像中已安装软件包的漏洞，支持中文漏洞库，可与 Harbor 无缝集成。

🔥Open source RASP solution

🧬 辅助生成 XRay YAML POC

Pre-Built Vulnerable Environments Based on Docker-Compose

Production-safe dynamic tracing and diagnostics for Java applications—attach to live JVMs with no restart or recompilation.

基于Celery+Redis分布式队列的Src子域名资产收集项目，用于POC批量利用的前期信息收集阶段

(PoC) Python version of CVE-2019-11043 exploit by neex

Web APIs for Django. 🎸

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

python3批量poc检测工具

Typed interactions with the GitHub API v3

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档