Security Knowledge Structure(安全知识汇总)

Java通用漏洞修复安全组件

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

公务员从入门到上岸，最佳程序员公考实践教程

一款基于burp的反射xss检测插件

Burp Extension in Python hilighting DOM Sinks and Hosts using DOM XSS Wiki regex

A vul-finder for loading CPG and automated finding vul-call-chains

KCon is a famous Hacker Con powered by Knownsec Team.

neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin

Java ASM learn

Restful Toolkit for IntelliJ IDEA

An automated static taint analysis tool for the Lua web framework.

Control-Flow, Dominator Tree, and dot output from Python bytecode

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

集权设施扫描器

常见漏洞示例代码、修复方案、白盒检测误报案例. SAST test case.

pdf-js-inject，能够将js代码注入到pdf文件中,也可以注入xss-payload到pdf文件中

PDF Reader in JavaScript

pdf exploit 集成

🔥「企业级低代码平台」前后端分离架构SpringBoot 2.x/3.x，SpringCloud，Ant Design&Vue3，Mybatis，Shiro，JWT。强大的代码生成器让前后端代码一键生成，无需写任何代码! 引领新的开发模式OnlineCoding->代码生成->手工MERGE，帮助Java项目解决70%重复工作，让开发更关注业务，既能快速提高效率，帮助公司节省成本，同时又不失…

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST),…

本项目是记录自己在Java代码审计过程中遇到的一些优秀文章内容，以及涉及到的Java项目源文件，汇总起来方便初学者下载分析。

一本 GPT4 生成的单词书📚，超过 8000 个单词分析，涵盖了词义、例句、词根词缀、变形、文化背景、记忆技巧和小故事

Marshal-EASM 攻击面管理系统-社区版

pine教学课程源码

TradingView与OKEx交易所对接的自动化交易软件