UzJu

Cloud-Bucket-Leak-Detection-Tools. 六大云存储，泄露利用检测工具

CloudKeyKiller. 阿里云AK泄露利用工具

Gin-Vue-admin-poc-CVE-2022-21660. CVE-2022-21660

0day. 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

JavaSec-SQLInject-Demo. SQLInject

2022-HW-POC. 2022 护网行动 POC 整理

opentrader. 🤖 Open-source crypto trading bot | 📈 DCA & GRID strategies | ✨ UI | ⭐ Star to support the project!

UzJuAutoGetVulnForXray. Rad and Xray get website vuln! Good luck :)

wiki. 漏洞文库 wiki.wy876.cn

javaweb-sec. Java

container-escape-check. docker container escape check

Dictionary-Of-Pentesting. Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

DongTai. DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

fine. 网络空间资产测绘、ICP备案、天眼查股权结构图、IP138域名解析与IP反查、外部HTTP调用与小程序反编译。

nopen. NOPEN Tool 又名“morerats” 莫雷斯特，是方程式工具包里的工具。

ast-app-docker-compose. Docker compose for AST APP（ IAST + SAST）

ChatGPT-Next-Web. A well-designed cross-platform ChatGPT UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT 应用。

java-security. Java安全☞代码审计/漏洞研究/武器化

AutoNeteaseMusic. 网易云音乐自断刷歌升级和签到

RedTeamNotes. 红队笔记

msdt-follina. Codebase to generate an msdt-follina payload

fscan-POC. 强化fscan的漏扫POC库

TerraformGoat. TerraformGoat is HuoCorp research lab's "Vulnerable by Design" multi cloud deployment tool.

java-sec-code. Java web common vulnerabilities and security code which is base on springboot and spring security

CloudPentestCheatsheets. This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

redteam_vul. 红队作战中比较常遇到的一些重点系统漏洞整理。

Spring-Cloud-Gateway-CVE-2022-22947. CVE-2022-22947

CreateHiddenAccount. A tool for creating hidden accounts using the registry.

Security-SrcNote.

MYSQL_SQL_BYPASS_WIKI. mysql注入,bypass的一些心得

Security-Tools_Public. This Public Security Tools

linux-exploit-suggester. Linux privilege escalation auditing tool

Grafana-Unauthorized-FileRead. Grafana任意文件读取