蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

Share Things Related to Java - Java安全漫谈笔记相关内容

A qqbot for Princess Connect Re:Dive (and other usage :)

JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。

Automatically created C2 Feeds

掩日 - 免杀执行器生成工具

【2022】全网最新安卓保活方案，Android12 native保活 daemon keepalive

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

2021 hw

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

这是基于Burp Suite官方文档翻译而来的中文版文档

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Cross platform GUI toolkit in Go inspired by Material Design

快速搭建各种漏洞环境(Various vulnerability environment)

互联网资安风控实战

免杀webshell无限生成工具

High-performance, scalable time-series database designed for Industrial IoT (IIoT) scenarios

Decryption-Tools

🙃 A delightful community-driven (with 2,400+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python…

ICS/SCADA honeypot

ToolSet for VxWorks Based Embedded Device Analyses

Repo for counting stars and contributing. Press F to pay respect to glorious developers.

一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..

Tools, tips, tricks, and more for exploring ICS Security.

Source code for Modbus/TCP fuzzer used for ETFA 2015 paper

Gitbook

ICS/SCADA Security Resource（整合工控安全相关资源）