Alvaro Muñoz

Deserialization payload generator for a variety of .NET formatters

JRE8u20_RCE_Gadget

DupeKeyInjector

Collection of bypass gadgets to extend and wrap ysoserial payloads

Edit and review GitHub issues and pull requests from the comfort of your favorite editor

CodeQL plugin for Neovim

random brain dumps

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

S2-046-PoC

Web Server that serves a single file and keeps the connection open until user releases it.

GreHack 2021 CodeQL for Java workshop

RCE Exploit PoC for XMLDecoder

.NET Deserialization Passive Scanner

Exploit PoC for Spring RCE issue (CVE-2011-2894)

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

No description.

ViewState Payload Generator

Nvim LSP client configurations

A nice and cobaltish neovim theme

RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler

PoC for Scala and Groovy

POC for XStream RCE

Demos for RSA talk: RESTing on your laurels will get you owned

Pwntester Blog

OWASP GoatDroid Exploit Apps

OGNL Expression Injection Tescase

Color scheme for vim

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

No description.

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

A repository for learning various heap exploitation techniques.

No description.

No description.

Automatically exported from code.google.com/p/jdeserialize

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Open Source Deep Packet Inspection Software Toolkit

Restlet API consuming XML serialized Java Objects. Vulnerable to XXE and RCE (if third party libraries like GroovyShell are found in the classpath)

pwntester Blog

gh-cdr

No description.

Neovim color scheme

XQuery Injection Testcases

Some helper scripts to set up an environment for angr development.

unix-like reverse engineering framework and commandline tools

No description.

No description.

Collection of somewhat useful stuff for CTF events

PoC for detecting disclosure mechanisms for open source projects

Persistent Memory Development Kit

Things3 database -> Markdown conversion script.

No description.

Simple Binary Encoding (SBE) - High Performance Message Codec

A powerful cross-platform raw photo processing program

No description.

Sync your Things 3 Logbook with Obsidian

A plugin for [Obsidian](https://obsidian.md) which allows syntax highlighting for code blocks in the editor.

For running psychology and neuroscience experiments

No description.

No description.

No description.

Apache Log4j 远程代码执行

Vim-fork focused on extensibility and usability

No description.

This tool downloads, installs, and configures a shiny new copy of Chromium.

Language Server Protocol (LSP) support for vim and neovim.

Sublime Text Editor Themes for Fortify rulepacks and NSTs

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

No description.

Perfect Java serialization to and from JSON format

No description.

Powerful Markdown package for Sublime Text with better syntax understanding and good color schemes.

Official OWASP Top 10 Document Repository

mako template renderer for aiohttp.web

Python API for SEKO PoolDose Devices

Default channel file for Package Control. Follow the directions at:

No description.

Azure Command-Line Interface

Airbyte is an open-source EL(T) platform that helps you replicate your data in your warehouses, lakes and databases.

No description.

Modbus RTU communication with Brink Flair to use in home assistant / esphome

eBPF-based Networking, Security, and Observability

No description.

No description.

No description.

Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container.

An Ansible role for installing cisagov/ncats-webui.

Feign makes writing java http clients easier

Get the Git ref for comments on Pull Reguests

An example of how Entitlements can be configured

No description.

:blue_book: Home Assistant User documentation

Profile

neovim plugin to retrieve the name of the running LSP client(s) and display a spinner when a job is in progress

No description.

Cron utils for parsing, validations and human readable descriptions as well as date/time interoperability.

Neovim plugin as a lightweight wrapper around https://github.com/mickael-menu/zk

No description.

一个简单实用的FOFA客户端 By flashine

open Multiple View Geometry library. Basis for 3D computer vision and Structure from Motion.

Distributed compiler with a central scheduler to share build load

An open Apple Wireless Direct Link (AWDL) implementation written in C

Apple CUPS Sources

Go wrapper for Leopard Reed-Solomon erasure code library.

OlaPy, an experimental OLAP engine based on Pandas

Minimal interfaces and default classes to build HTTP based services on top of undertow.

No description.

Compocase for the AI programming competition at The Gathering 2015

A DBus daemon to configure input devices, mainly high-end and gaming mice

Nvim Treesitter configurations and abstraction layer

MDB (9bit serial) GPIO bit-banging option for VMC (vending machine controller). Sub-project, used in github.com/temoto/vender

No description.

boat-house 后端库，web api 微服务

Simple statusline component that shows what scope you are working inside

Official repository for the ZNC IRC bouncer

A byte code analyzer for finding deserialization gadget chains in Java applications

Zeek Auxiliary Programs

Inspektor code checker

A cross-platform IRC framework for Qt

GeckoLib is an animation engine for Minecraft Mods, with support for complex 3D keyframe-based animations, 30+ easings, concurrent animation support, sound and particle keyframes, event keyframes, and more. Available for Forge, Fabric and Quilt.

Cross-platform automation tool

No description.

SCSI Tape Encryption Manager - stenc (formerly on https://sourceforge.net/projects/stenc/)

Built-In-Function (BIF) Compiler/Generator for Zeek

Reference implementations of MLPerf™ inference benchmarks

Telegram Bot written in .NET

Neuroscience information exchange format

Oraxen is a minecraft plugin that allows to easily use Minecraft 1.14 features in order to create new items with custom textures. It handles the resourcepack generation, upload (using Polymath) and has an extensible API.

The iputils package is set of small useful utilities for Linux networking.

An (open source) digital debating toolkit.

⚡️ Simple, Modular & Accessible UI Components for your React Applications

Server-sent events support for aiohttp

Web sessions for aiohttp.web

Minimal asyncio memcached client

Java library to provide an API for beans and properties.

Ettercap Project

Java library to enable conversion to and from standard string formats.

Bot for management of Ansible issues and PRs on GitHub.

a distributed deep learning platform

基于springboot && springcloud的脚手架，支持服务合并部署与拆分部署、接口加解密签名、日志数据 脱敏、接口数据mock、接口文档自动生成、请求幂等校验、接口日志&&sql日志切面打印、分表分库分布式事务、国际化语言等

C++ library for performing cryptographic operations with electronic ID smart cards

Partly implemented Orthanc API Client in Java using Retrofit.

auth and permissions for aiohttp

No description.

Java library to represent monetary amounts.

An Ansible role for installing the server setup script passed down by the RVA folks.

No description.

Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.

C++ library for accessing smart cards using the PC/SC API

C++ library for mocking the PC/SC API functions

Starter workspace to use with the CodeQL extension for Visual Studio Code.

Set up your GitHub Actions workflow to add MSBuild.exe into the PATH

MathJax source code for version 3 and beyond

Community health files for the @GitHub organization

Add support for a StreamDeck to Google Meet using WebHID

No description.

No description.

No description.

Mirror of Apache Dubbo at v2.7.8

No description.

Notepad.exe as Git commit editor

Auxiliary repository for external ping checks

Ruby on Rails + GitHub patches

Determines which markup library to use to render a content file (e.g. README) on GitHub

Treesitter playground integrated into Neovim

Fast sorting of version numbers

No description.

Default community health files for the SAP organization

MockServer enables easy mocking of any system you integrate with via HTTP or HTTPS with clients written in Java, JavaScript and Ruby. MockServer also includes a proxy that introspects all proxied traffic including encrypted SSL traffic and supports Port Forwarding, Web Proxying (i.e. HTTP proxy), HTTPS Tunneling Proxying (using HTTP CONNECT) and SOCKS Proxying (i.e. dynamic port forwarding).

Find, Filter, Preview, Pick. All lua, all the time.

LSP Completion source for deoplete

The Open Security Summit 2021 is focused on the collaboration between, Developers and Application Security

WIP: Statusline written in pure lua. Supports co-routines, functions and jobs.

plenary: full; complete; entire; absolute; unqualified. All the lua functions I don't want to write twice.

No description.

No description.

A vim plugin that adds some nice extra's for working with markdown documents

paste image to markdown

Spring XD makes it easy to solve common big data problems such as data ingestion and export, real-time analytics, and batch workflow orchestration

Treesitter source for completion-nvim and more

A fork of Casper, the default theme for Ghost

Patched jelly used in Jenkins

ECE 477 Senior Design

Sonatype Nexus Repository Manager; Open-source codebase mirror

vim-vsnip integrations to other plugins.

:cactus: Viewer & Finder for LSP symbols and tags

A vim plugin for communicating with a language server

deoplete source for vim-lsc.

webui repository for radare2

Object Graph Navigation Library

A customizable life embetterment robot.

A Qt and C++ GUI for radare2 reverse engineering framework

Highlight Burp proxy requests made by different browsers

Burp Suite Logger++: Log activities of all the tools in Burp Suite

A vulnerable Play application for attackers.

Demonstrates the features of the Spring MVC web framework

QEMU Interactive Runtime Analyser

An adorable little framework and command line tool for interacting with SourceKit.

Swift completions in Vim using deoplete

Autocompletion for Swift in NeoVim with deoplete.

Multi-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers