This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, …

Jar Analyzer Project - a powerful jar / class file analysis tool particularly suitable for security research

CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。

awesome data security methodology and practice

Java web common vulnerabilities and security code which is base on springboot and spring security

Simple and rapid framework to build workflows with Celery

A modern Go utility library which provides helpers (map, find, contains, filter, ...)

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Kotlin parser in pure Python.

Supervisor事件通知, 支持邮件, Slack, WebHook

Django 优秀资源大全。

JAVA安全SDK及编码规范

用于检测maven项目的第三方依赖组件是否存在安全漏洞。

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

Django Rest Framework Proxy views

mall项目是一套电商系统，包括前台商城系统及后台管理系统，基于SpringBoot+MyBatis实现，采用Docker容器化部署。 前台商城系统包含首页门户、商品推荐、商品搜索、商品展示、购物车、订单流程、会员中心、客户服务、帮助中心等模块。 后台管理系统包含商品管理、订单管理、会员管理、促销管理、运营管理、内容管理、统计报表、财务管理、权限管理、设置等模块。

linux信息收集/应急响应/常见后门检测脚本

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

jenkins CVE-2017-1000353 POC

Open Source PHP Framework (originally from EllisLab)

安全思维导图集合

A gevent spider ,support webkit for dom parsing.

Shell Scripts to clean my mac

一款由 YSRC 开源的主机入侵检测系统

后端架构师技术图谱

自动化收集linux信息

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。