A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

A CAT called tabby ( Code Analysis Tool )

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".

spring-cloud-function SpEL RCE, Vultarget & Poc

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages