🚀 A very efficient Texas Holdem GTO solver ♠️♥️♣️♦️

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

List of Awesome CobaltStrike Resources

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense.

KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。

Jdk1.8源码解析

oh my soot !

自己学习java安全的一些总结，主要是安全审计相关

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

Headless chrome/chromium automation library (unofficial port of puppeteer)

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

An powerful enhanced toolkit of MyBatis for simplify development

Command line Java Decompiler

Soot - A Java optimization framework

A helpful Java Deserialization exploit framework.

A CAT called tabby ( Code Analysis Tool )

generate CobaltStrike's cross-platform payload

Focus on what matters instead of fighting with Git.

Tomcat-Ajp协议文件读取漏洞

Scripted Local Linux Enumeration & Privilege Escalation Checks

A byte code analyzer for finding deserialization gadget chains in Java applications

A powerful browser crawler for web vulnerability scanners

Intercepting browser's http requests which made by XMLHttpRequest.

从wooyun中提取的payload，以及burp插件

Display and control your Android device

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

Linux系统的安全，通过脚本对Linux系统进行一键检测和一键加固

Mobile penetration testing android & iOS command cheatsheet

技术面试最后反问面试官的话