sie504
Follow
Starred repositories
一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services
FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用
基于chrome、firefox插件的被动式信息泄漏检测工具
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）
TeachYourselfCS 的中文翻译 | A Chinese translation of TeachYourselfCS
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true wit…
EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation
重生之我在安全行业讨口子系列，分享在安全行业讨口子过程中，SRC、项目实战的有趣案例 Rebirth - My Struggle in the Security Industry Series: Sharing Interesting Cases in the Process of Struggling for a Living in the Security Industry, inclu…
This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
A collection of PDF/books about the modern web application security and bug bounty.
Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.…
HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
[WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐
Programmer's guide about how to cook at home.
A Programmer’s Guide to Longevity | Helping everyone live a longer, healthier, happier life. Available in 8 languages.
网络安全、信息安全资讯的RSS订阅，网络安全、信息安全博客的RSS订阅，网络安全、信息安全公众号的RSS订阅
润学全球官方指定GITHUB，整理润学宗旨、纲领、理论和各类润之实例；解决为什么润，润去哪里，怎么润三大问题； 并成为新中国人的核心宗教，核心信念。
📡 PoC auto collect from GitHub.
收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。