阿信

javasec. 自己学习java安全的一些总结，主要是安全审计相关

FastjsonScan. 一个简单的Fastjson反序列化检测burp插件

CVE-2020-15148-bypasses. 几条关于CVE-2020-15148（yii2反序列化）的绕过

vuls. 收集整理一些漏洞，利用方法，poc等等，方便快速查阅

BugBountyNotes. 简单记录下自己在挖掘SRC

webshell_bypass_research. 自己零零散散研究以及收集的一些免杀技巧，以便为后续查阅，拓宽思路

cve-2020-2555. CVE-2020-2555

genealogy. 利用二叉树实现一个简单的家谱管理系统

xssprobe. xss探针

AxinSAST. Java

xss-me. 为了方便快速搭建，把网上流传的改进版的xss.me用docker进行部署

evil_ftp. Python

xxeDemo. Java

vulcheck-java-agent. Java

DongTai-agent-java. Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

codespace_demo. EJS

DongTai-engine. DongTai-engine used to analyze the method data collected by the probe, analyze whether there are vulnerabilities in API requests through the algorithm of taint tracking, and is also responsible for timing tasks, including: expired log cleaning, probe state maintenance, data packet replay processing, etc.

DongTai. DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

obsidian-plugin-demo. obsidian plugin learning demo

mosec-composer-plugin. 用于检测composer项目的第三方依赖组件是否存在安全漏洞。

dongtai-core. Provides the Django Model class that the DongTai project depends on, the Django API abstract class of the DongTai project, the vulnerability detection engine, constants, documents, etc.

mosec-node-plugin. 用于检测 node 项目的第三方依赖组件是否存在安全漏洞。

django-filter-tables2-admin. A demo of customized admin developed with django-filter and django-tables2

composer-demo.

Maskhe. test

pentest_tools. C

rmi_codebase_poc. Java

CVE-2021-21300.

test.

rmi_cve20173241. Java