Starred repositories
In-process sandboxed-python based on RustPython and WASM Reactor mode for building LLM Agent's PTC (Programmatic Tool Calling) style tools
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
为GPT/GLM等LLM大语言模型提供实用化交互接口，特别优化论文阅读/润色/写作体验，模块化设计，支持自定义快捷按钮&函数插件，支持Python和C++等项目剖析&自译解功能，PDF/LaTex论文翻译&总结功能，支持并行问询多种LLM模型，支持chatglm3等本地模型。接入通义千问, deepseekcoder, 讯飞星火, 文心一言, llama2, rwkv, claude2, m…
Simple source code security audit helper
weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.
A prototype of Shared-keywords aware Taint Checking, a novel static analysis approach that tracks the data flow of the user input between front-end and back-end to precisely detect security vulnera…
XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning.
Reverse engineering resources for the eCOS platform.
ProFuzzBench - A Benchmark for Stateful Protocol Fuzzing
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
AFLNet: A Greybox Fuzzer for Network Protocols (https://thuanpv.github.io/publications/AFLNet_ICST20.pdf)
QASan is a custom QEMU 3.1.1 that detects memory errors in the guest using AddressSanitizer.
📡 PoC auto collect from GitHub.
UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities
SymQEMU: Compilation-based symbolic execution for binaries
Python snippets for Ghidra's Program and Decompiler APIs
Academic papers and articles that I read related to web hacking, fuzzing, etc. / 阅读过的Web安全方向、模糊测试方向的一些论文与阅读笔记