Popular repositories Loading

1. gadgetinspector-1 gadgetinspector-1 Public

   Forked from threedr3am/gadgetinspector

   一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

   Java

2. BinAbsInspector BinAbsInspector Public

   Forked from KeenSecurityLab/BinAbsInspector

   BinAbsInspector: Vulnerability Scanner for Binaries

   Java

3. ysoserial ysoserial Public

   Forked from frohoff/ysoserial

   A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

   Java

4. webshell-sample webshell-sample Public

   Forked from gfaff/webshell-sample

   收集自网络各处的 webshell 样本，用于测试 webshell 扫描器检测率。

   PHP

5. HyperDbg HyperDbg Public

   Forked from HyperDbg/HyperDbg

   State-of-the-art native debugging tool

   C

6. bochspwn bochspwn Public

   Forked from googleprojectzero/bochspwn

   A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities

   C++