Alvaro Muñoz

ysoserial.net. Deserialization payload generator for a variety of .NET formatters

octo.nvim. Edit and review GitHub issues and pull requests from the comfort of your favorite editor

SerialKillerBypassGadgetCollection. Collection of bypass gadgets to extend and wrap ysoserial payloads

cheatsheets. random brain dumps

0day. 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

JRE8u20_RCE_Gadget. JRE8u20_RCE_Gadget

DupeKeyInjector. DupeKeyInjector

S2-046-PoC. S2-046-PoC

codeql.nvim. CodeQL plugin for Neovim

BlockingServer. Web Server that serves a single file and keeps the connection open until user releases it.

codeql_grehack_workshop. GreHack 2021 CodeQL for Java workshop

XMLDecoder. RCE Exploit PoC for XMLDecoder

dotnet-deserialization-scanner. .NET Deserialization Passive Scanner

SpringBreaker. Exploit PoC for Spring RCE issue (CVE-2011-2894)

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

dotfiles. Lua

ViewStatePayloadGenerator. ViewState Payload Generator

nvim-lsp. Nvim LSP client configurations

nautilus.nvim. A nice and cobaltish neovim theme

XStreamServer. RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler

JVMDeserialization. PoC for Scala and Groovy

XStreamPOC. POC for XStream RCE

RSA_RESTing. Demos for RSA talk: RESTing on your laurels will get you owned

pwntester-blog. Pwntester Blog

OWASP-GoatDroid-Dolphis. OWASP GoatDroid Exploit Apps

OGNLInjection. OGNL Expression Injection Tescase

cobalt2.vim. Color scheme for vim

EpicTreasure. Python

jdeserialize. Automatically exported from code.google.com/p/jdeserialize

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

codeql. CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

how2heap. A repository for learning various heap exploitation techniques.

StaticInitializerPayload. Java

crane.nvim. Lua

pwntester.github.io. pwntester Blog

gh-cdr. gh-cdr

cobange. Neovim color scheme

test-project. Dockerfile

angr-dev. Some helper scripts to set up an environment for angr development.

pwntools. C

XQueryInjection. XQuery Injection Testcases

csaw2016_rock. Python

RestletXMLDecoder. Restlet API consuming XML serialized Java Objects. Vulnerable to XXE and RCE (if third party libraries like GroovyShell are found in the classpath)

cm-editor-syntax-highlight-obsidian. A plugin for [Obsidian](https://obsidian.md) which allows syntax highlighting for code blocks in the editor.

nDPI. Open Source Deep Packet Inspection Software Toolkit

gh-mrva.

RawTherapee. A powerful cross-platform raw photo processing program

ESPHomeGeniusStandingDesk. C++

azure-cli. Azure Command-Line Interface

ossec-hids. OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

airbyte. Airbyte is an open-source EL(T) platform that helps you replicate your data in your warehouses, lakes and databases.

obsidian-things-logbook. Sync your Things 3 Logbook with Obsidian

simple-binary-encoding. Simple Binary Encoding (SBE) - High Performance Message Codec