Repository Index

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

• java
• deserialization
• gadget
• exploit

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

• security-audit
• build-tool
• maven-plugin
• jenkins-plugin

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

• springboot
• springboot-actuator-rce
• rce
• spring-boot-vulnerability

TranslatedA knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

• poc

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

• owasp
• appsec
• security
• bom

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

DIVA Android - Damn Insecure and vulnerable App for Android

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

Oversecured Vulnerable Android App

• appsec
• android-security
• vulnerable-application
• vulnerable-android-apps

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code

• android-application
• webview-xss
• application-security
• vulnerable-application

A vulnerability patch gathering tool