pyyso. pyyso is a Python package that generate java serialized poc. Including CommonsCollections1-7, JDK7u21, JDK8u20, ldap for jndi, shiro-550, CommonsBeanutils1 no cc, JRMPClient, high version JDK Bypass, Fake MySQL for JDBC attack
55go-sec-code. Go-sec-code is a project for learning Go vulnerability code.
50go-cves. 收录go语言编写的项目、框架和组件出现的cve,或者一些相关的利用方式的文章
48goot. a dataflow analysis framework implemented in Go, like soot
40LibAFL-Learn. 一个中文版本的 LibAFL 笔记,主要内容是 LibAFL 原理相关的内容,同时也附加一些 LibAFL 使用方面的 tips ,方便查阅和参考。
36execjs. 参考PyExecJS,提供GO调用javascript的能力
6logi. Logi is a LDAP/MySQL server focusing on pingback deserialize recon and exploit.
4go-mitm. a mitm proxy for http/https written in go
3my-ctf-challenges. Archive of some ctf challenges, provided by me.
2ReconAIzer. A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!
1goutil. 💪 Helper Utils For Go: int, string, array/slice, map, struct, dump, convert/format, error, web/http, cli/flag, OS/ENV, filesystem, system, test/assert, time and more. Go 常用的一些工具函数,数字,字符串,数组,Map,文件,错误,时间日期,特殊处理,格式化,常用信息获取等等
1Smap. a drop-in replacement for Nmap powered by shodan.io
1