weblogic t3 deserialization rce

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

Hacker101 CTF Writeup

Check AWS Security Group compliance

Check AWS security groups opening

Flags ec2 instances with wide open or misconfigured security groups

Application Layer DoS attack simulator

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

Defund the Police.

Windows 应急响应手册

Linux 应急响应手册

Block lists to prevent JavaScript miners

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Some results of my DGA reversing efforts

A scanner named pecker, written in php,It can check dangerous functions with lexical analysis.

findWebshell是一款基于python开发的webshell检测工具。

越权检测工具

宝瓜Windows日志分析器，一款简洁方便的Windows日志分析工具。

Investigate malicious Windows logon by visualizing and analyzing Windows event log

蓝队工具箱

java-web 自动化鉴权绕过

List DTDs and generate XXE payloads using those local DTDs.

Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

通过jsp脚本扫描并查杀Tomcat内存马，当前支持Servlet-api、Tomcat-Value、Timer、Websocket 、Upgrade 、ExecutorShell内存马的查杀逻辑。

Alibaba Java Diagnostic Tool Arthas/Alibaba Java诊断利器Arthas

针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and researchers. Currently, file header spoofing and certificat…