Stars
🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集
share experience towards for information management, brainstorming and so on.
【两万字原创】零基础学fastjson漏洞（提高篇），公众号：追梦信安
[WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐
The ultimate, most advanced, security, DeFi, assembly, web3 auditor course ever created.
You Know, For WEB Fuzzing ! 日站用的字典。
🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens
收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。
（播放量 457 万）计算机速成课 （完整 40集）
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, securit…
一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Share Things Related to Java - Java安全漫谈笔记相关内容
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
Fast passive subdomain enumeration tool.
Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。
Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components throug…