cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

chatgpt-next-web

A cross-platform ChatGPT/Gemini UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT/Gemini 应用。

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hello-java-sec

☕️ Java Security，安全编码和代码审计

jeecgboot-vue3

🔥JeecgBoot—Vue3版前端源码，采用 Vue3.0+TypeScript+Vite+Ant-Design-Vue等新技术方案，包括二次封装组件、utils、hooks、动态菜单、权限校验、按钮级别权限控制等功能。 是JeecgBoot低代码平台的vue3技术栈的全新UI版本，功能强于vue2版。

jndi

JNDI 注入利用工具

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pegasus

Config files for my GitHub profile.

playpiano

Java弹奏钢琴乐曲

pxplan

CVE-2023-2023

ruoyi-vue-pro

for pegasus

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shadowsocks

记录一下Shadowsocks的前世今生，以及一个简单的教程总结

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

webshell

This is a webshell open source project

ysuserial