Panda

JavaCodeAudit. Getting started with java code auditing 代码审计入门的小项目

logbackRceDemo. The project is a simple vulnerability Demo environment written by SpringBoot. Here, I deliberately wrote a vulnerability environment where there are arbitrary file uploads, and then use the `scan` attribute in the loghack configuration file to cooperate with the logback vulnerability to implement RCE.

ThymeleafSSTIBypass. Thymeleaf SSTI Bypass

discourse-sidebar-categories. Plugin for Toxu site sidebar.

ScanShiro. 一个批量扫描shiro漏洞的工具,支持AES/CMG

MySQL-Monitor. MySQL服务器执行SQL记录实时监控（WEB版本）